GAQM ISO-IEC-LI Exam Questions Instant Access

Question 1

What is an example of a security incident?

AThe lighting in the department no longer works.

BA member of staff loses a laptop.

CYou cannot set the correct fonts in your word processing software.

DA file is saved under an incorrect name.

Answer : B

Question 2

Who is accountable to classify information assets?

Athe CEO

Bthe CISO

Cthe Information Security Team

Dthe asset owner

Answer : D

Question 3

A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the company's staff. Which kind of security measure could have prevented this?

Aphysical security measure

BAn organizational security measure

CA technical security measure

Answer : A

Question 4

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

AA code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.

BA code of conduct is a standard part of a labor contract.

CA code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

Answer : C

Question 5

A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

AIf the risk analysis has not been carried out.

BWhen computer systems are kept in a cellar below ground level.

CWhen the computer systems are not insured.

DWhen the organization is located near a river.

Answer : B

Question 6

You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks. What is the relation between a threat, risk and risk analysis?

AA risk analysis identifies threats from the known risks.

BA risk analysis is used to clarify which threats are relevant and what risks they involve.

CA risk analysis is used to remove the risk of a threat.

DRisk analyses help to find a balance between threats and risks.

Answer : B

Question 7

What does the Information Security Policy describe?

Ahow the InfoSec-objectives will be reached

Bwhich InfoSec-controls have been selected and taken

Cwhat the implementation-planning of the information security management system is

Dwhich Information Security-procedures are selected

Answer : A

GAQM ISO / IEC 27002 - Lead Implementer ISO-IEC-LI Exam Questions