PECB PECB Certifications ISO-IEC-27001-LEAD-AUDITOR Questions & Answers

• Question 81:

  The following are the guidelines to protect your password, except: (Choose two)

  A. Don't use the same password for various company system security access

  B. Do not share passwords with anyone

  C. For easy recall, use the same password for company and personal accounts

  D. Change a temporary password on first log-on

  Correct Answer: BC

• Question 82:

  Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

  A. Social engineering threat

  B. Organisational threat

  C. Technical threat

  D. Malware threat

  Correct Answer: A

• Question 83:

  The following are definitions of Information, except:

  A. accurate and timely data

  B. specific and organized data for a purpose

  C. mature and measurable data

  D. can lead to understanding and decrease in uncertainty

  Correct Answer: C

• Question 84:

  Which of the following is a preventive security measure?

  A. Installing logging and monitoring software

  B. Shutting down the Internet connection after an attack

  C. Storing sensitive information in a data save

  Correct Answer: C

• Question 85:

  Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.

  A. True

  B. False

  Correct Answer: A

• Question 86:

  What is we do in ACT - From PDCA cycle

  A. Take actions to continually monitor process performance

  B. Take actions to continually improve process performance

  C. Take actions to continually monitor process performance

  D. Take actions to continually improve people performance

  Correct Answer: B

• Question 87:

  A hacker gains access to a webserver and can view a file on the server containing credit card numbers.

  Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

  A. Availability

  B. Confidentiality

  C. Integrity

  D. Compliance

  Correct Answer: B

• Question 88:

  Which measure is a preventive measure?

  A. Installing a logging system that enables changes in a system to be recognized

  B. Shutting down all internet traffic after a hacker has gained access to the company systems

  C. Putting sensitive information in a safe

  Correct Answer: C

• Question 89:

  Which of the following is not a type of Information Security attack?

  A. Legal Incidents

  B. Vehicular Incidents

  C. Technical Vulnerabilities

  D. Privacy Incidents

  Correct Answer: B

• Question 90:

  After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?

  A. Between incident and damage

  B. Between detection and classification

  C. Between recovery and normal operations

  D. Between classification and escalation

  Correct Answer: A