GAQM ISO-IEC-LI Exam Questions Instant Access

Question 1

Who is accountable to classify information assets?

Athe CEO

Bthe CISO

Cthe Information Security Team

Dthe asset owner

Answer : D

Question 2

Why is compliance important for the reliability of the information?

ACompliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

BBy meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

CWhen an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

DWhen an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

Answer : B

Question 3

Select risk control activities for domain "10. Encryption" of ISO / 27002: 2013 (Choose two)

AWork in safe areas

BCryptographic Controls Use Policy

CPhysical security perimeter

DKey management

Answer : B, D

Question 4

What is the best way to comply with legislation and regulations for personal data protection?

APerforming a threat analysis

BMaintaining an incident register

CPerforming a vulnerability analysis

DAppointing the responsibility to someone

Answer : D

Question 5

Prior to employment, _________ as well as terms & conditions of employment are included as controls in ISO 27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.

Ascreening

Bauthorizing

Ccontrolling

Dflexing

Answer : A

Question 6

What is the greatest risk for an organization if no information security policy has been defined?

AIf everyone works with the same account, it is impossible to find out who worked on what.

BInformation security activities are carried out by only a few people.

CToo many measures are implemented.

DIt is not possible for an organization to implement information security in a consistent manner.

Answer : D

Question 7

True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

ATrue

BFalse

Answer : A

GAQM ISO / IEC 27002 - Lead Implementer ISO-IEC-LI Exam Questions