GAQM ISO 27001 : 2013 - Certified Lead Auditor - ISO27-13-001 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

A. After a fire, the information systems cannot be restored B. Unauthorised persons will have access to both the servers and backups C. After a server crash, it will take extra time to bring it back up again D. Responsibility for the backups is not defined well

Discussion 0

Correct Answer: A Vote an answer

Question 2

A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?

A. between threat and incident B. between recovery and threat C. between incident and damage D. between damage and recovery

Discussion 0

Correct Answer: C Vote an answer

Question 3

A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

A. This analysis is based on scenarios and situations and produces a subjective view of the possible threats. B. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

Discussion 0

Correct Answer: A Vote an answer

Question 4

Who is responsible for Initial asset allocation to the user/custodian of the assets?

A. Asset Manager B. Asset Owner C. Asset Stakeholder D. Asset Practitioner

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which of the following is a preventive security measure?

A. Installing logging and monitoring software B. Storing sensitive information in a data save C. Shutting down the Internet connection after an attack

Discussion 0

Correct Answer: B Vote an answer

Question 6

You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?

A. Risk avoidance B. Risk skipping C. Risk bearing D. Risk neutral

Discussion 0

Correct Answer: C Vote an answer

Question 7

What type of legislation requires a proper controlled purchase process?

A. Intellectual property rights act B. Government information act C. Computer criminality act D. Personal data protection act

Discussion 0

Correct Answer: A Vote an answer

Question 8

The following are definitions of Information, except:

A. mature and measurable data B. specific and organized data for a purpose C. can lead to understanding and decrease in uncertainty D. accurate and timely data

Discussion 0

Correct Answer: A Vote an answer

Question 9

Access Control System, CCTV and security guards are form of:

A. Environment Security B. Compliance C. Physical Security D. Access Control

Discussion 0

Correct Answer: C Vote an answer

Question 10

In which order is an Information Security Management System set up?

A. Implementation, operation, maintenance, establishment B. Establishment, implementation, operation, maintenance C. Implementation, operation, improvement, maintenance D. Establishment, operation, monitoring, improvement

Discussion 0

Correct Answer: B Vote an answer