Updated Apr-2023 Test Engine to Practice ISO-IEC-27001-Lead-Implementer Test Questions [Q26-Q47]

QUESTION 26
What does the Information Security Policy describe?

QUESTION 27
Prior to employment, _________ as well as terms & conditions of employment are included as controls in ISO
27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.

QUESTION 28
The identified owner of an asset is always an individual

QUESTION 29
Who is accountable to classify information assets?

QUESTION 30
You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

QUESTION 31
You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

QUESTION 32
A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the company’s staff. Which kind of security measure could have prevented this?

QUESTION 33
Which of these reliability aspects is “completeness” a part of?

QUESTION 34
You have juststarted working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

QUESTION 35
What is the objective of classifying information?

QUESTION 36
Companies use 27002 for compliance for which of the following reasons:

QUESTION 37
ISO 27002 provides guidance in the following area

QUESTION 38
What is the best way to comply with legislation and regulations for personal data protection?

QUESTION 39
What is the greatest risk for an organization ifno information security policy has been defined?

QUESTION 40
True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

QUESTION 41
What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?

QUESTION 42
Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

QUESTION 43
You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

QUESTION 44
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

QUESTION 45
What sort of security does a Public Key Infrastructure (PKI) offer?