Reliable ISO-IEC-27001-Lead-Auditor Dumps Questions Available as Web-Based Practice Test Engine [Q45-Q69]

QUESTION 45
Which of the following is a technical security measure?

QUESTION 46
Does the security have the right to ask you to display your ID badges and check your bags?

QUESTION 47
What is we do in ACT – From PDCA cycle

QUESTION 48
There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

QUESTION 49
Why do we need to test a disaster recovery plan regularly, and keep it up to date?

QUESTION 50
The following are purposes of Information Security, except:

QUESTION 51
Below is Purpose of “Integrity”, which is one of the Basic Components of Information Security

QUESTION 52
Which of the following factors does NOT contribute to the value of data for an organisation?

QUESTION 53
Which threat could occur if no physical measures are taken?

QUESTION 54
Which reliability aspect of information is compromised when a staff member denies having sent a message?

QUESTION 55
Changes to the information processing facilities shall be done in controlled manner.

QUESTION 56
A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

QUESTION 57
What type of measure involves the stopping of possible consequences of security incidents?

QUESTION 58
Which of the following is an information security management system standard published by the International Organization for Standardization?

QUESTION 59
What would be the reference for you to know who should have access to data/document?

QUESTION 60
You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?

QUESTION 61
What is the purpose of an Information Security policy?

QUESTION 62
A property of Information that has the ability to prove occurrence of a claimed event.

QUESTION 63
What is social engineering?

QUESTION 64
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

QUESTION 65
CMM stands for?

QUESTION 66
What type of compliancy standard, regulation or legislation provides a code of practice for information security?

QUESTION 67
How are data and information related?

QUESTION 68
Changes on project-managed applications or database should undergo the change control process as documented.

QUESTION 69
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.