[Dec 29, 2021] Verified ISO-IEC-27001-Lead-Auditor dumps and 99 unique questions
ISO-IEC-27001-Lead-Auditor Dumps for Pass Guaranteed - Pass ISO-IEC-27001-Lead-Auditor Exam 2021
NEW QUESTION 22
Which of the following statements are correct for Clean Desk Policy?
- A. Don't leave valuable items on your desk if you are not in your work area.
- B. Don't leave laptops without cable lock.
- C. Don't leave highly confidential items.
- D. Don't leave confidential documents on your desk.
Answer: A,C,D
NEW QUESTION 23
What is we do in ACT - From PDCA cycle
- A. Take actions to continually improve process performance
- B. Take actions to continually monitor process performance
- C. Take actions to continually monitor process performance
- D. Take actions to continually improve people performance
Answer: A
NEW QUESTION 24
CMM stands for?
- A. Capability Maturity Matrix
- B. Capable Mature Model
- C. Capability Maturity Model
- D. Capacity Maturity Matrix
Answer: C
NEW QUESTION 25
A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:
- A. Greet and ask him what is his business
- B. Say "hi" and offer coffee
- C. Escort him to his destination
- D. Call the receptionist and inform about the visitor
Answer: B
NEW QUESTION 26
Availability means
- A. Service should not be accessible when required
- B. Service should be accessible at the required time and usable only by the authorized entity
- C. Service should be accessible at the required time and usable by all
Answer: B
NEW QUESTION 27
A scenario wherein the city or location where the building(s) reside is / are not accessible.
- A. City
- B. Component
- C. Facility
- D. Country
Answer: A
NEW QUESTION 28
Which of the following is not a type of Information Security attack?
- A. Privacy Incidents
- B. Vehicular Incidents
- C. Legal Incidents
- D. Technical Vulnerabilities
Answer: B
NEW QUESTION 29
-------------------------is an asset like other important business assets has value to an organization and consequently needs to be protected.
- A. Information
- B. Infrastructure
- C. Data
- D. Security
Answer: A
NEW QUESTION 30
Which measure is a preventive measure?
- A. Putting sensitive information in a safe
- B. Installing a logging system that enables changes in a system to be recognized
- C. Shutting down all internet traffic after a hacker has gained access to the company systems
Answer: A
NEW QUESTION 31
Does the security have the right to ask you to display your ID badges and check your bags?
- A. False
- B. True
Answer: B
NEW QUESTION 32
Which is the glue that ties the triad together
- A. Process
- B. Collaboration
- C. Technology
- D. People
Answer: A
NEW QUESTION 33
A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:
- A. planning for continuous improvement.
- B. plan, do, check, act.
- C. RACI Matrix
- D. time based planning.
Answer: B
NEW QUESTION 34
An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?
- A. risk
- B. threat
- C. vulnerability
- D. dependency
Answer: B
NEW QUESTION 35
Phishing is what type of Information Security Incident?
- A. Private Incidents
- B. Legal Incidents
- C. Cracker/Hacker Attacks
- D. Technical Vulnerabilities
Answer: C
NEW QUESTION 36
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
- A. Make the information security incident details known to all employees
- B. Report suspected or known incidents upon discovery through the Servicedesk
- C. Cooperate with investigative personnel during investigation if needed
- D. Preserve evidence if necessary
Answer: A
NEW QUESTION 37
What type of system ensures a coherent Information Security organisation?
- A. Information Technology Service Management System (ITSM)
- B. Information Exchange Data System (IEDS)
- C. Information Security Management System (ISMS)
- D. Federal Information Security Management Act (FISMA)
Answer: C
NEW QUESTION 38
Which is not a requirement of HR prior to hiring?
- A. Must undergo Awareness training on information security.
- B. Undergo background verification
- C. Applicant must complete pre-employment documentation requirements
- D. Must successfully pass Background Investigation
Answer: A
NEW QUESTION 39
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?
- A. Social engineering threat
- B. Malware threat
- C. Technical threat
- D. Organisational threat
Answer: A
NEW QUESTION 40
......
Latest 100% Passing Guarantee - Brilliant ISO-IEC-27001-Lead-Auditor Exam Questions PDF: https://www.testsimulate.com/ISO-IEC-27001-Lead-Auditor-study-materials.html