[Jul-2022] ISO-IEC-27001-Lead-Implementer Exam Dumps Pass with Updated 2022 PECB Certified ISO/IEC 27001 Lead Implementer exam [Q30-Q47]

QUESTION 30
In the context ofcontact with special interest groups, any information-sharing agreements should identify requirements for the protection of _________ information.

Availability

Confidential

Authentic

Authorization

QUESTION 31
A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the company’s staff. Which kind of security measure could have prevented this?

physical security measure

An organizational security measure

A technical security measure

QUESTION 32
How many domains does ISO / IEC 27002: 2013 have?

140

110

114

QUESTION 33
Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?

Thefirst step consists of checking if the user is using the correct certificate.

The first step consists of checking if the user appears on the list of authorized users.

The first step consists of comparing the password with the registered password.

The first step consists of granting access to the information to which the user is authorized.

QUESTION 34
You are a consultant and areregularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don’t want the temporary workers to have access to your reports.
Which reliability aspect of the information in your reports must you protect?

Availability

Integrity

Confidentiality

QUESTION 35
Companies use 27002 for compliance for which of the following reasons:

A structured program that helps with security and compliance

Explicit requirements for all regulations

Compliance with ISO 27002 is sufficient to comply with all regulations

QUESTION 36
Responsibilities for information security in projects should be defined and allocated to:

the project manager

specified roles defined in the used project management method of the organization

the InfoSec officer

the owner of the involved asset

QUESTION 37
What is an example of a security incident?

The lighting in the department no longer works.

A member of staff loses a laptop.

You cannot set the correct fonts in your word processing software.

A file is saved under an incorrect name.

QUESTION 38
What are the data protection principles set out in the GDPR?

Purpose limitation, proportionality, availability, data minimisation

Purpose limitation, proportionality, data minimisation, transparency

Target group, proportionality, transparency, data minimisation

Purpose limitation, pudicity, transparency, data minimisation

QUESTION 39
One of the ways Internet of Things (IoT) devices can communicate with each other (or ‘the outside world’) is using a so-called short-range radio protocol. Which kind of short-range radio protocol makes it possible to use your phone as a credit card?

Near Field Communication (NFC)

Bluetooth

Radio Frequency Identification (RFID)

The 4G protocol

QUESTION 40
The identified owner of an asset is always an individual

True

False

QUESTION 41
What is an example of a good physical security measure?

All employees and visitors carry an access pass.

Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

QUESTION 42
What is the best way to comply with legislation and regulations for personal data protection?

Performing a threat analysis

Maintaining an incident register

Performing a vulnerability analysis

Appointing the responsibility to someone

QUESTION 43
What is the objective of classifying information?

Authorizing the use of an information system

Creating alabel that indicates how confidential the information is

Defining different levels of sensitivity into which information may be arranged

Displaying on the document who is permitted access

QUESTION 44
ISO 27002 provides guidance in the following area

PCI environment scoping

Information handling recommendations

Framework for an overall security andcompliance program

Detailed lists of required policies and procedures

QUESTION 45
Which of the following measures is a correctivemeasure?

Incorporating an Intrusion Detection System (IDS) in the design of a computer center

Installing a virus scanner in an information system

Making a backup of the data that has been created or altered that day

Restoring a backup of the correct database after a corrupt copy of the database was written over the original

QUESTION 46
What is the best description of a risk analysis?

A risk analysis is a method of mapping risks without looking at company processes.

A risk analysis helps to estimate the risks and develop the appropriate security measures.

A risk analysis calculates the exact financial consequences of damages.

QUESTION 47
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

The recipient, Rachel

The person who drafted the insurance terms and conditions

The manager, Linda

The sender, Peter