Verified & Latest ISO-IEC-27001-Lead-Auditor Dump Q&As with Correct Answers [Q68-Q88]

Q68. The following are the guidelines to protect your password, except:

Q69. In which order is an Information Security Management System set up?

Q70. Which measure is a preventive measure?

Q71. Which of the following factors does NOT contribute to the value of data for an organisation?

Q72. What is the purpose of an Information Security policy?

Q73. ————————-is an asset like other important business assets has value to an organization and consequently needs to be protected.

Q74. Select the words that best complete the sentence:
To complete the sentence with the word(s) click on the blank section you want to complete so that it is highlighted in red, and then click on the application text from the options below. Alternatively, you may drag and drop the option to the appropriate blank section.

Q75. Which two of the following are examples of audit methods that ‘do’ involve human interaction?

Q76. What type of system ensures a coherent Information Security organisation?

Q77. Which is the glue that ties the triad together

Q78. Changes to the information processing facilities shall be done in controlled manner.

Q79. Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Q80. What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Q81. Which of the following is an information security management system standard published by the International Organization for Standardization?

Q82. Which threat could occur if no physical measures are taken?

Q83. Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.

Q84. What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Q85. Which of the following is a technical security measure?

Q86. You are performing an ISMS audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to verify the information security incident management process. The IT Security Manager presents the information security incident management procedure and explains that the process is based on ISO/IEC 27035-1:2016.
You review the document and notice a statement “any information security weakness, event, and incident should be reported to the Point of Contact (PoC) within 1 hour after identification”. When interviewing staff, you found that there were differences in the understanding of the meaning of “weakness, event, and incident”.
You sample incident report records from the event tracking system for the last 6 months with summarized results in the following table.

You would like to further investigate other areas to collect more audit evidence. Select two options that will not be in your audit trail.

Q87. Changes to the information processing facilities shall be done in controlled manner.

Q88. You are an experienced ISMS audit team leader providing instruction to an auditor in training. They are unclear in their understanding of risk processes and ask you to provide them with an example of each of the processes detailed below.
Match each of the descriptions provided to one of the following risk management processes.
To complete the table click on the blank section you want to complete so that it is highlighted in red, and then click on the applicable text from the options below. Alternatively, you may drag and drop each option to the appropriate blank section.