PECB PECB Certifications ISO-IEC-27001-LEAD-AUDITOR Questions & Answers

• Question 61:

  What is the worst possible action that an employee may receive for sharing his or her password or access with others?

  A. Forced roll off from the project

  B. The lowest rating on his or her performance assessment

  C. Three days suspension from work

  D. Termination

  Correct Answer: D

• Question 62:

  What type of compliancy standard, regulation or legislation provides a code of practice for information security?

  A. ISO/IEC 27002

  B. Personal data protection act

  C. Computer criminality act

  D. IT Service Management

  Correct Answer: A

• Question 63:

  A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

  A. Identifying assets and their value

  B. Implementing counter measures

  C. Establishing a balance between the costs of an incident and the costs of a security measure

  D. Determining relevant vulnerabilities and threats

  Correct Answer: B

• Question 64:

  Who is authorized to change the classification of a document?

  A. The author of the document

  B. The administrator of the document

  C. The owner of the document

  D. The manager of the owner of the document

  Correct Answer: C

• Question 65:

  We can leave laptops during weekdays or weekends in locked bins.

  A. True

  B. False

  Correct Answer: B

• Question 66:

  Implement plan on a test basis - this comes under which section of PDCA

  A. Plan

  B. Do

  C. Act

  D. Check

  Correct Answer: B

• Question 67:

  What is the relationship between data and information?

  A. Data is structured information.

  B. Information is the meaning and value assigned to a collection of data.

  Correct Answer: B

• Question 68:

  What is the purpose of an Information Security policy?

  A. An information security policy makes the security plan concrete by providing the necessary details

  B. An information security policy provides insight into threats and the possible consequences

  C. An information security policy provides direction and support to the management regarding information security

  D. An information security policy documents the analysis of risks and the search for countermeasures

  Correct Answer: C

• Question 69:

  You see a blue color sticker on certain physical assets. What does this signify?

  A. The asset is very high critical and its failure affects the entire organization

  B. The asset with blue stickers should be kept air conditioned at all times

  C. The asset is high critical and its failure will affect a group/s/project's work in the organization

  D. The asset is critical and the impact is restricted to an employee only

  Correct Answer: C

• Question 70:

  Availability means:

  A. Service should be accessible at the required time and usable by all

  B. Service should be accessible at the required time and usable only by the authorized entity

  C. Service should not be accessible when required

  Correct Answer: B