GAQM GAQM Certifications ISO-ISMS-LA Questions & Answers

• Question 11:

  Which of the following is an information security management system standard published by the International Organization for Standardization?

  A. ISO9008

  B. ISO27001

  C. ISO5501

  D. ISO22301

  Correct Answer: B

• Question 12:

  How is the purpose of information security policy best described?

  A. An information security policy documents the analysis of risks and the search for countermeasures.

  B. An information security policy provides direction and support to the management regarding information security.

  C. An information security policy makes the security plan concrete by providing it with the necessary details.

  D. An information security policy provides insight into threats and the possible consequences.

  Correct Answer: B

• Question 13:

  Integrity of data means

  A. Accuracy and completeness of the data

  B. Data should be viewable at all times

  C. Data should be accessed by only the right people

  Correct Answer: A

• Question 14:

  We can leave laptops during weekdays or weekends in locked bins.

  A. True

  B. False

  Correct Answer: B

• Question 15:

  What type of compliancy standard, regulation or legislation provides a code of practice for information security?

  A. ISO/IEC 27002

  B. Personal data protection act

  C. Computer criminality act

  D. IT Service Management

  Correct Answer: A

• Question 16:

  What is we do in ACT - From PDCA cycle

  A. Take actions to continually monitor process performance

  B. Take actions to continually improve process performance

  C. Take actions to continually monitor process performance

  D. Take actions to continually improve people performance

  Correct Answer: B

• Question 17:

  You have a hard copy of a customer design document that you want to dispose off. What would you do

  A. Throw it in any dustbin

  B. Shred it using a shredder

  C. Give it to the office boy to reuse it for other purposes

  D. Be environment friendly and reuse it for writing

  Correct Answer: B

• Question 18:

  Who is responsible for Initial asset allocation to the user/custodian of the assets?

  A. Asset Manager

  B. Asset Owner

  C. Asset Practitioner

  D. Asset Stakeholder

  Correct Answer: B

• Question 19:

  Which is the glue that ties the triad together

  A. Process

  B. People

  C. Collaboration

  D. Technology

  Correct Answer: A

• Question 20:

  What is social engineering?

  A. A group planning for a social activity in the organization

  B. Creating a situation wherein a third party gains confidential information from you

  C. The organization planning an activity for welfare of the neighborhood

  Correct Answer: B