[Q45-Q67] View ISO-IEC-27001-Lead-Implementer Exam Question Dumps With Latest Demo [Jan 02, 2024]

Q45. Which of the following measures is a correctivemeasure?

Q46. Who is authorized to change the classification of a document?

Q47. Scenario 9: OpenTech provides IT and communications services. It helps data communication enterprises and network operators become multi-service providers During an internal audit, its internal auditor, Tim, has identified nonconformities related to the monitoring procedures He identified and evaluated several system Invulnerabilities.
Tim found out that user IDs for systems and services that process sensitive information have been reused and the access control policy has not been followed After analyzing the root causes of this nonconformity, the ISMS project manager developed a list of possible actions to resolve the nonconformity. Then, the ISMS project manager analyzed the list and selected the activities that would allow the elimination of the root cause and the prevention of a similar situation in the future. These activities were included in an action plan The action plan, approved by the top management, was written as follows:
A new version of the access control policy will be established and new restrictions will be created to ensure that network access is effectively managed and monitored by the Information and Communication Technology (ICT) Department The approved action plan was implemented and all actions described in the plan were documented.
Based on this scenario, answer the following question:
OpenTech has decided to establish a new version of its access control policy. What should the company do when such changes occur?

Q48. Based on scenario 6. when should Colin deliver the next training and awareness session?

Q49. Companies use 27002 for compliance for which of the following reasons:

Q50. Which approach should organizations use to implement an ISMS based on ISO/IEC 27001?

Q51. What should TradeB do in order to deal with residual risks? Refer to scenario 4.

Q52. An organization has decided to conduct information security awareness and training sessions on a monthly basis for all employees. Only 45% of employees who attended these sessions were able to pass the exam.
What does the percentage represent?

Q53. How does SunDee’s negligence affect the ISMS certificate? Refer to scenario 8.

Q54. One of the ways Internet of Things (IoT) devices can communicate with each other (or ‘the outside world’) is using a so-called short-range radio protocol. Which kind of short-range radio protocol makes it possible to use your phone as a credit card?

Q55. Why did InfoSec establish an IRT? Refer to scenario 7.

Q56. What is an example of a good physical security measure?

Q57. Based on scenario 8. did the nonconformity report include all the necessary aspects?

Q58. What are the data protection principles set out in the GDPR?

Q59. What is the objective of classifying information?

Q60. ISO 27002 provides guidance in the following area

Q61. What should an organization allocate to ensure the maintenance and improvement of the information security management system?

Q62. Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?

Q63. Select the controls that correspond to thedomain “9. ACCESS CONTROL” of ISO / 27002 (Choose three)

Q64. Susan sends an email to Paul. Who determines the meaning and the value of information in this email?

Q65. Based on scenario 9. is the action plan for the identified nonconformities sufficient to eliminate the detected nonconformities?

Q66. Which situation described in scenario 1 represents a threat to HealthGenic?

Q67. Based on scenario 2, Beauty should have implemented (1)_____________________________ to detect (2)_________________________.