Pass Your ISO-IEC-27001-Lead-Auditor Exam Easily – Real ISO-IEC-27001-Lead-Auditor Practice Dump Updated Feb 28, 2022 [Q43-Q67]

NO.43 In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

NO.44 After a fire has occurred, what repressive measure can be taken?

NO.45 What would be the reference for you to know who should have access to data/document?

NO.46 There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

NO.47 A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

NO.48 A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?

NO.49 Which of the following is a possible event that can have a disruptive effect on the reliability of information?

NO.50 What type of system ensures a coherent Information Security organisation?

NO.51 Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

NO.52 Which department maintain’s contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

NO.53 What is the worst possible action that an employee may receive for sharing his or her password or access with others?

NO.54 In acceptable use of Information Assets, which is the best practice?

NO.55 A property of Information that has the ability to prove occurrence of a claimed event.

NO.56 A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

NO.57 What is we do in ACT – From PDCA cycle

NO.58 The following are definitions of Information, except:

NO.59 Who are allowed to access highly confidential files?

NO.60 You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?

NO.61 All are prohibited in acceptable use of information assets, except:

NO.62 Stages of Information

NO.63 Which measure is a preventive measure?

NO.64 After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?

NO.65 Which threat could occur if no physical measures are taken?

NO.66 Does the security have the right to ask you to display your ID badges and check your bags?

NO.67 Which of the following is not a type of Information Security attack?