GAQM GAQM Certifications ISO-ISMS-LA Questions & Answers

• Question 51:

  An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

  A. True

  B. False

  Correct Answer: A

• Question 52:

  Which of the following is a possible event that can have a disruptive effect on the reliability of information?

  A. Threat

  B. Risk

  C. Vulnerability

  D. Dependency

  Correct Answer: A

• Question 53:

  A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself. You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.

  What is a qualitative risk analysis?

  A. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

  B. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

  Correct Answer: B

• Question 54:

  What type of legislation requires a proper controlled purchase process?

  A. Personal data protection act

  B. Computer criminality act

  C. Government information act

  D. Intellectual property rights act

  Correct Answer: D

• Question 55:

  You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and

  now want to determine your risk strategy. You decide to take measures for the large risks but not for the

  small risks.

  What is this risk strategy called?

  A. Risk bearing

  B. Risk avoidance

  C. Risk neutral

  D. Risk skipping

  Correct Answer: A

• Question 56:

  What is a reason for the classification of information?

  A. To provide clear identification tags

  B. To structure the information according to its sensitivity

  C. Creating a manual describing the BYOD policy

  Correct Answer: B

• Question 57:

  You receive the following mail from the IT support team: Dear User,Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below details in order to continue using your account. In case of no response,

  Name: Email ID: Password:

  DOB:

  Kindly contact the webmail team for any further support. Thanks for your attention.

  Which of the following is the best response?

  A. Ignore the email

  B. Respond it by saying that one should not share the password with anyone

  C. One should not respond to these mails and report such email to your supervisor

  Correct Answer: C

• Question 58:

  Availability means

  A. Service should be accessible at the required time and usable by all

  B. Service should be accessible at the required time and usable only by the authorized entity

  C. Service should not be accessible when required

  Correct Answer: B

• Question 59:

  There is a network printer in the hallway of the company where you work. Many employees don't pick up their printouts immediately and leave them on the printer.

  What are the consequences of this to the reliability of the information?

  A. The integrity of the information is no longer guaranteed.

  B. The availability of the information is no longer guaranteed.

  C. The confidentiality of the information is no longer guaranteed.

  D. The Security of the information is no longer guaranteed.

  Correct Answer: B

• Question 60:

  Phishing is what type of Information Security Incident?

  A. Private Incidents

  B. Cracker/Hacker Attacks

  C. Technical Vulnerabilities

  D. Legal Incidents

  Correct Answer: B