PECB ISO-IEC-27001-Lead-Implementer Exam Practice Test Instant Access

Question 1

What is the objective of classifying information?

AAuthorizing the use of an information system

BCreating a label that indicates how confidential the information is

CDefining different levels of sensitivity into which information may be arranged

DDisplaying on the document who is permitted access

Answer : C

Question 2

What is the greatest risk for an organization if no information security policy has been defined?

AIf everyone works with the same account, it is impossible to find out who worked on what.

BInformation security activities are carried out by only a few people.

CToo many measures are implemented.

DIt is not possible for an organization to implement information security in a consistent manner.

Answer : D

Question 3

An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?

AAvailability measure

BIntegrity measure

COrganizational measure

DTechnical measure

Answer : D

Question 4

We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

AAvailability, Information Value and Confidentiality

BAvailability, Integrity and Confidentiality

CAvailability, Integrity and Completeness

DTimeliness, Accuracy and Completeness

Answer : B

Question 5

What is an example of a security incident?

AThe lighting in the department no longer works.

BA member of staff loses a laptop.

CYou cannot set the correct fonts in your word processing software.

DA file is saved under an incorrect name.

Answer : B

Question 6

Which of the following measures is a preventive measure?

AInstalling a logging system that enables changes in a system to be recognized

BShutting down all internet traffic after a hacker has gained access to the company systems

CPutting sensitive information in a safe

DClassifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk

Answer : C

Question 7

Who is authorized to change the classification of a document?

AThe author of the document

BThe administrator of the document

CThe owner of the document

DThe manager of the owner of the document

Answer : C

PECB ISO/IEC 27001 Lead Implementer Exam Practice Test

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7