GAQM GAQM Certifications ISO27-13-001 Questions & Answers

• Question 31:

  There is a scheduled fire drill in your facility. What should you do?

  A. Participate in the drill

  B. Excuse yourself by saying you have an urgent deliverable

  C. Call in sick

  D. None of the above

  Correct Answer: A

• Question 32:

  In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.

  Which factor is [b]not[/b] important for determining the value of data for an organization?

  A. The content of data.

  B. The degree to which missing, incomplete or incorrect data can be recovered.

  C. The indispensability of data for the business processes.

  D. The importance of the business processes that make use of the data.

  Correct Answer: A

• Question 33:

  What is the security management term for establishing whether someone's identity is correct?

  A. Identification

  B. Authentication

  C. Authorisation

  D. Verification

  Correct Answer: B

• Question 34:

  Which of the following is a technical security measure?

  A. Encryption

  B. Security policy

  C. Safe storage of backups

  D. User role profiles.

  Correct Answer: A

• Question 35:

  What would be the reference for you to know who should have access to data/document?

  A. Data Classification Label

  B. Access Control List (ACL)

  C. Masterlist of Project Records (MLPR)

  D. Information Rights Management (IRM)

  Correct Answer: B

• Question 36:

  A hacker gains access to a webserver and can view a file on the server containing credit card numbers.

  Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

  A. Availability

  B. Confidentiality

  C. Integrity

  D. Compliance

  Correct Answer: B

• Question 37:

  Which of the following is an information security management system standard published by the International Organization for Standardization?

  A. ISO9008

  B. ISO27001

  C. ISO5501

  D. ISO22301

  Correct Answer: B

• Question 38:

  What is the name of the system that guarantees the coherence of information security in the organization?

  A. Information Security Management System (ISMS)

  B. Rootkit

  C. Security regulations for special information for the government

  D. Information Technology Service Management (ITSM)

  Correct Answer: A

• Question 39:

  A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?

  A. Availability

  B. Confidentiality

  C. Integrity

  D. Authenticity

  Correct Answer: B

• Question 40:

  There is a network printer in the hallway of the company where you work. Many employees don't pick up their printouts immediately and leave them on the printer.

  What are the consequences of this to the reliability of the information?

  A. The integrity of the information is no longer guaranteed.

  B. The availability of the information is no longer guaranteed.

  C. The confidentiality of the information is no longer guaranteed.

  D. The Security of the information is no longer guaranteed.

  Correct Answer: B