GAQM GAQM: ISO ISO-ISMS-LA Questions & Answers

• Question 1:

  Which of the following factors does NOT contribute to the value of data for an organisation?

  A. The correctness of data

  B. The indispensability of data

  C. The importance of data for processes

  D. The content of data

  Correct Answer: D

• Question 2:

  Which of the following does a lack of adequate security controls represent?

  A. Asset

  B. Vulnerability

  C. Impact

  D. Threat

  Correct Answer: B

• Question 3:

  Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

  A. Unauthorised persons will have access to both the servers and backups

  B. Responsibility for the backups is not defined well

  C. After a fire, the information systems cannot be restored

  D. After a server crash, it will take extra time to bring it back up again

  Correct Answer: C

• Question 4:

  A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

  A. time based planning.

  B. plan, do, check, act.

  C. planning for continuous improvement.

  D. RACI Matrix

  Correct Answer: B

• Question 5:

  In what part of the process to grant access to a system does the user present a token?

  A. Authorisation

  B. Verification

  C. Authentication

  D. Identification

  Correct Answer: D

• Question 6:

  A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.

  What is not one of the four main objectives of a risk analysis?

  A. Identifying assets and their value

  B. Implementing counter measures

  C. Establishing a balance between the costs of an incident and the costs of a security measure

  D. Determining relevant vulnerabilities and threats

  Correct Answer: B

• Question 7:

  In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.

  Which factor is [b]not[/b] important for determining the value of data for an organization?

  A. The content of data.

  B. The degree to which missing, incomplete or incorrect data can be recovered.

  C. The indispensability of data for the business processes.

  D. The importance of the business processes that make use of the data.

  Correct Answer: A

• Question 8:

  -------------------------is an asset like other important business assets has value to an organization and consequently needs to be protected.

  A. Infrastructure

  B. Data

  C. Information

  D. Security

  Correct Answer: C

• Question 9:

  A property of Information that has the ability to prove occurrence of a claimed event.

  A. Electronic chain letters

  B. Integrity

  C. Availability

  D. Accessibility

  Correct Answer: B

• Question 10:

  All are prohibited in acceptable use of information assets, except:

  A. Electronic chain letters

  B. E-mail copies to non-essential readers

  C. Company-wide e-mails with supervisor/TL permission.

  D. Messages with very large attachments or to a large number ofrecipients.

  Correct Answer: C