Get Ready with ISO-IEC-27001-Lead-Auditor Exam Dumps (2023) [Q21-Q39]

Q21. A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?

Q22. A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

Q23. As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Q24. We can leave laptops during weekdays or weekends in locked bins.

Q25. Which of the following is a possible event that can have a disruptive effect on the reliability of information?

Q26. The following are definitions of Information, except:

Q27. An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

Q28. ————————-is an asset like other important business assets has value to an organization and consequently needs to be protected.

Q29. Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.

Q30. A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

Q31. Who is responsible for Initial asset allocation to the user/custodian of the assets?

Q32. In which order is an Information Security Management System set up?

Q33. Integrity of data means

Q34. In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

Q35. Access Control System, CCTV and security guards are form of:

Q36. There is a scheduled fire drill in your facility. What should you do?

Q37. Which is the glue that ties the triad together

Q38. What is the name of the system that guarantees the coherence of information security in the organization?

Q39. Changes on project-managed applications or database should undergo the change control process as documented.