[Aug 25, 2022] Free ISO 27001 ISO-IEC-27001-Lead-Implementer Official Cert Guide PDF Download [Q12-Q29]

August 25, 2022 latestexam 0 Comments

Rate this post

[Aug 25, 2022] Free ISO 27001 ISO-IEC-27001-Lead-Implementer Official Cert Guide PDF Download

PECB ISO-IEC-27001-Lead-Implementer Official Cert Guide PDF

PECB ISO-IEC-27001-Lead-Implementer Exam Syllabus Topics:

Topic	Details
Topic 1	Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO IEC 27001
Topic 2	Support an organization in operating, maintaining, and continually improving an ISMS based on ISO IEC 27001 Implementing an ISMS based on ISO IEC 27001
Topic 3	Interpret the ISO IEC 27001 requirements for an ISMS from the perspective of an implementer Information security management system (ISMS)
Topic 4	Prepare an organization to undergo a third-party certification audit Fundamental principles and concepts of an information security management system (ISMS)

NO.12 Select the controls that correspond to thedomain “9. ACCESS CONTROL” of ISO / 27002 (Choose three)

Restriction of access to information

Return of assets

Management of access rights with special privileges

Withdrawal or adaptation of access rights

NO.13 What is the ISO / IEC 27002 standard?

It is a guide of good practices that describes the controlobjectives and recommended controls regarding information security.

It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001

It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

NO.14 What is the best way to comply with legislation and regulations for personal data protection?

Performing a threat analysis

Maintaining an incident register

Performing a vulnerability analysis

Appointing the responsibility to someone

NO.15 Which of these control objectives are NOT in the domain “12.OPERATIONAL SAFETY”?

Protection against malicious code

Redundancies

Test data

Technical vulnerability management

NO.16 True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

True

False

NO.17 In the context ofcontact with special interest groups, any information-sharing agreements should identify requirements for the protection of _________ information.

Availability

Confidential

Authentic

Authorization

NO.18 The identified owner of an asset is always an individual

True

False

NO.19 What are the data protection principles set out in the GDPR?

Purpose limitation, proportionality, availability, data minimisation

Purpose limitation, proportionality, data minimisation, transparency

Target group, proportionality, transparency, data minimisation

Purpose limitation, pudicity, transparency, data minimisation

NO.20 It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle blowing”)

True

False

NO.21 You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

Risk bearing

Risk avoiding

Risk neutral

Risk passing

NO.22 What is the greatest risk for an organization ifno information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures areimplemented.

It is not possible for an organization to implement information security in a consistent manner.

NO.23 You have juststarted working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

A code of conduct helps to prevent the misuse of IT facilities.

A code of conduct is alegal obligation that organizations have to meet.

A code of conduct prevents a virus outbreak.

A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

NO.24 Who is authorized to change the classification of a document?

The author of the document

The administrator of the document

The owner of the document

The manager of the owner of the document

NO.25 What is an example of a security incident?

The lighting in the department no longer works.

A member of staff loses a laptop.

You cannot set the correct fonts in your word processing software.

A file is saved under an incorrect name.

NO.26 Responsibilities for information security in projects should be defined and allocated to:

the project manager

specified roles defined in the used project management method of the organization

the InfoSec officer

the owner of the involved asset

NO.27 What is an example of a non-human threat to the physical environment?

Fraudulent transaction

Corrupted file

Storm

Virus

NO.28 You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

NO.29 What is the objective of classifying information?

Authorizing the use of an information system

Creating alabel that indicates how confidential the information is

Defining different levels of sensitivity into which information may be arranged

Displaying on the document who is permitted access

Loading …

Free ISO-IEC-27001-Lead-Implementer Exam Dumps to Improve Exam Score: https://www.latestcram.com/ISO-IEC-27001-Lead-Implementer-exam-cram-questions.html

Related Certifications

C-HCADM-01 (1)
C-SAC-2415 (1)
C-THR86-2205 (1)
C-S4CAM-2202 (1)
C-FIORDEV-22 (1)
C-ARSCC-2202 (1)
P-SECAUTH-21 (2)
C_THR82_2311 (1)
C-S4EWM-2020 (1)
C-THR88-2205 (1)

Free Cram & Latest Exams Dumps