PECB PECB Certifications ISO-IEC-27001-LEAD-AUDITOR Questions & Answers

• Question 71:

  __________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

  A. Trojan

  B. Operating System

  C. Virus

  D. Malware

  Correct Answer: D

• Question 72:

  The computer room is protected by a pass reader. Only the System Management department has a pass.

  What type of security measure is this?

  A. a corrective security measure

  B. a physical security measure

  C. a logical security measure

  D. a repressive security measure

  Correct Answer: B

• Question 73:

  Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required?

  A. COO

  B. CISO

  C. CSM

  D. MRO

  Correct Answer: B

• Question 74:

  Which of the following is a technical security measure?

  A. Encryption

  B. Security policy

  C. Safe storage of backups

  D. User role profiles.

  Correct Answer: A

• Question 75:

  Which of the following statements are correct for Clean Desk Policy? (Choose three)

  A. Don't leave confidential documents on your desk.

  B. Don't leave valuable items on your desk if you are not in your work area.

  C. Don't leave highly confidential items.

  D. Don't leave laptops without cable lock.

  Correct Answer: ABC

• Question 76:

  Which threat could occur if no physical measures are taken?

  A. Unauthorised persons viewing sensitive files

  B. Confidential prints being left on the printer

  C. A server shutting down because of overheating

  D. Hackers entering the corporate network

  Correct Answer: C

• Question 77:

  All are prohibited in acceptable use of information assets, except:

  A. Electronic chain letters

  B. E-mail copies to non-essential readers

  C. Company-wide e-mails with supervisor/TL permission.

  D. Messages with very large attachments or to a large number ofrecipients.

  Correct Answer: C

• Question 78:

  In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.

  Which factor is [b]not[/b] important for determining the value of data for an organization?

  A. The content of data.

  B. The degree to which missing, incomplete or incorrect data can be recovered.

  C. The indispensability of data for the business processes.

  D. The importance of the business processes that make use of the data.

  Correct Answer: A

• Question 79:

  What is the security management term for establishing whether someone's identity is correct?

  A. Identification

  B. Authentication

  C. Authorisation

  D. Verification

  Correct Answer: B

• Question 80:

  An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.

  A. True

  B. False

  Correct Answer: B