Guaranteed High Marks with Updated & Real ISO-IEC-27001-Lead-Implementer Dumps pdf Free Updates
PASS RATE ISO 27001 ISO-IEC-27001-Lead-Implementer Certified Exam DUMP
NEW QUESTION # 15
What is the greatest risk for an organization ifno information security policy has been defined?
- A. Too many measures areimplemented.
- B. Information security activities are carried out by only a few people.
- C. If everyone works with the same account, it is impossible to find out who worked on what.
- D. It is not possible for an organization to implement information security in a consistent manner.
Answer: D
NEW QUESTION # 16
ISO 27002 provides guidance in the following area
- A. Framework for an overall security andcompliance program
- B. Detailed lists of required policies and procedures
- C. Information handling recommendations
- D. PCI environment scoping
Answer: A
NEW QUESTION # 17
What are the data protection principles set out in the GDPR?
- A. Purpose limitation, pudicity, transparency, data minimisation
- B. Purpose limitation, proportionality, availability, data minimisation
- C. Purpose limitation, proportionality, data minimisation, transparency
- D. Target group, proportionality, transparency, data minimisation
Answer: C
NEW QUESTION # 18
Who is accountable to classify information assets?
- A. the CISO
- B. theasset owner
- C. the CEO
- D. the Information Security Team
Answer: B
NEW QUESTION # 19
What does the Information Security Policy describe?
- A. which InfoSec-controls have been selected and taken
- B. how the InfoSec-objectives will be reached
- C. what the implementation-planning of the information security management system is
- D. which Information Security-procedures are selected
Answer: B
NEW QUESTION # 20
You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventoryof threats and risks.
What is the relation between a threat, risk and risk analysis?
- A. A risk analysis identifies threats from the known risks.
- B. A risk analysis is used to clarify which threats are relevant and what risks they involve.
- C. Risk analyses help to find a balance between threats and risks.
- D. A riskanalysis is used to remove the risk of a threat.
Answer: B
NEW QUESTION # 21
Select the controls that correspond to thedomain "9. ACCESS CONTROL" of ISO / 27002 (Choose three)
- A. Restriction of access to information
- B. Withdrawal or adaptation of access rights
- C. Return of assets
- D. Management of access rights with special privileges
Answer: A,B,C
NEW QUESTION # 22
You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?
- A. Integrity
- B. Confidentiality
- C. Availability
Answer: B
NEW QUESTION # 23
What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?
- A. cryptographic techniques
- B. a password
- C. backup on another removable medium
- D. logging
Answer: A
NEW QUESTION # 24
Physical labels and ________ are two common forms of labeling which are mentioned in ISO 27002.
- A. metadata
- B. bridge
- C. teradata
Answer: A
NEW QUESTION # 25
True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered
- A. False
- B. True
Answer: B
NEW QUESTION # 26
What is the most important reason for applying the segregation of duties?
- A. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
- B. Segregation of duties makes it easier for a person who is readywith his or her part of the work to take time off or to take over the work of another person.
- C. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
- D. Segregation of duties makes it clear who is responsible for what.
Answer: A
NEW QUESTION # 27
Of the following, which is the best organization or set of organizations to contribute to compliance?
- A. IT only
- B. IT,business management, HR and legal
- C. IT and legal
- D. IT and management
Answer: B
NEW QUESTION # 28
What is an example of a non-human threat to the physical environment?
- A. Corrupted file
- B. Virus
- C. Storm
- D. Fraudulent transaction
Answer: C
NEW QUESTION # 29
Which of the following measures is a preventive measure?
- A. Shutting down all internet traffic after a hacker has gained access to thecompany systems
- B. Installing a logging system that enables changes in a system to be recognized
- C. Putting sensitive information in a safe
- D. Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
Answer: C
NEW QUESTION # 30
Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?
- A. Thefirst step consists of checking if the user is using the correct certificate.
- B. The first step consists of comparing the password with the registered password.
- C. The first step consists of checking if the user appears on the list of authorized users.
- D. The first step consists of granting access to the information to which the user is authorized.
Answer: C
NEW QUESTION # 31
What is an example of a good physical security measure?
- A. Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.
- B. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
- C. All employees and visitors carry an access pass.
Answer: C
NEW QUESTION # 32
What sort of security does a Public Key Infrastructure (PKI) offer?
- A. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
- B. Having a PKI shows customers that a web-based business is secure.
- C. A PKI ensures that backups of company data are made on a regular basis.
- D. It provides digital certificates that can be used to digitally signdocuments. Such signatures irrefutably determine from whom a document was sent.
Answer: C
NEW QUESTION # 33
The identified owner of an asset is always an individual
- A. False
- B. True
Answer: A
NEW QUESTION # 34
Prior to employment, _________ as well as terms & conditions of employment are included as controls in ISO
27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.
- A. authorizing
- B. screening
- C. flexing
- D. controlling
Answer: B
NEW QUESTION # 35
......
PECB ISO-IEC-27001-Lead-Implementer certification exam is designed to test the knowledge and skills of professionals who are responsible for implementing and managing an Information Security Management System (ISMS) based on the ISO/IEC 27001 standard. This globally recognized certification demonstrates that the individual has the necessary expertise to lead an organization through the process of implementing and maintaining an effective information security management system.
PECB ISO-IEC-27001-Lead-Implementer exam is a comprehensive exam that tests the candidate's knowledge and understanding of the ISO/IEC 27001 standard. ISO-IEC-27001-Lead-Implementer exam consists of multiple-choice questions and requires the candidate to demonstrate their understanding of key concepts and principles related to information security management. ISO-IEC-27001-Lead-Implementer exam also tests the candidate's ability to apply these concepts and principles in real-world scenarios.
Best ISO-IEC-27001-Lead-Implementer Exam Preparation Material with New Dumps Questions: https://www.troytecdumps.com/ISO-IEC-27001-Lead-Implementer-troytec-exam-dumps.html
Updates For the Latest ISO-IEC-27001-Lead-Implementer Free Exam Study Guide!: https://drive.google.com/open?id=1HtA2qmfAeQJAYDOwxL-3wVH9g9WzWoTu