GAQM GAQM Certifications ISO-ISMS-LA Questions & Answers

• Question 41:

  Which of the following is not a type of Information Security attack?

  A. Legal Incidents

  B. Vehicular Incidents

  C. Technical Vulnerabilities

  D. Privacy Incidents

  Correct Answer: B

• Question 42:

  In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

  A. Report suspected or known incidents upon discovery through the Servicedesk

  B. Preserve evidence if necessary

  C. Cooperate with investigative personnel during investigation if needed

  D. Make the information security incident details known to all employees

  Correct Answer: D

• Question 43:

  What is the difference between a restricted and confidential document?

  A. Restricted - to be shared among an authorized group Confidential - to be shared among named individuals

  B. Restricted - to be shared among named individuals Confidential - to be shared among an authorized group

  C. Restricted - to be shared among named individuals Confidential - to be shared across the organization only

  D. Restricted - to be shared among named individuals Confidential - to be shared with friends and family

  Correct Answer: B

• Question 44:

  Who is authorized to change the classification of a document?

  A. The author of the document

  B. The administrator of the document

  C. The owner of the document

  D. The manager of the owner of the document

  Correct Answer: C

• Question 45:

  What is the standard definition of ISMS?

  A. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation.

  B. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving

  C. A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security

  D. A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization's information security to achieve business objectives.

  Correct Answer: D

• Question 46:

  As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

  A. Appoint security staff

  B. Encrypt all sensitive information

  C. Formulate a policy

  D. Set up an access control procedure

  Correct Answer: C

• Question 47:

  Which is not a requirement of HR prior to hiring?

  A. Undergo background verification

  B. Applicant must complete pre-employment documentation requirements

  C. Must undergo Awareness training on information security.

  D. Must successfully pass Background Investigation

  Correct Answer: C

• Question 48:

  The following are the guidelines to protect your password, except:

  A. Don't use the same password for various company system security access

  B. Do not share passwords with anyone

  C. For easy recall, use the same password for company and personal accounts

  D. Change a temporary password on first log-on

  Correct Answer: BC

• Question 49:

  What type of system ensures a coherent Information Security organisation?

  A. Federal Information Security Management Act (FISMA)

  B. Information Technology Service Management System (ITSM)

  C. Information Security Management System (ISMS)

  D. Information Exchange Data System (IEDS)

  Correct Answer: C

• Question 50:

  The computer room is protected by a pass reader. Only the System Management department has a pass. What type of security measure is this?

  A. a corrective security measure

  B. a physical security measure

  C. a logical security measure

  D. a repressive security measure

  Correct Answer: B