ISO 27001 : 2013 - Certified Lead Auditor - ISO27-13-001 Exam Practice Test

Question 1

In acceptable use of Information Assets, which is the best practice?

A. Access to information and communication systems are provided for business purpose only

B. Interfering with or denying service to any user other than the employee's host

C. Playing any computer games during office hours

D. Accessing phone or network transmissions, including wireless or wifi transmissions

Correct Answer: A

Question 2

You see a blue color sticker on certain physical assets. What does this signify?

A. The asset is high critical and its failure will affect a group/s/project's work in the organization

B. The asset is very high critical and its failure affects the entire organization

C. The asset is critical and the impact is restricted to an employee only

D. The asset with blue stickers should be kept air conditioned at all times

Correct Answer: A

Question 3

In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

A. The importance of the business processes that make use of the data.

B. The indispensability of data for the business processes.

C. The content of data.

D. The degree to which missing, incomplete or incorrect data can be recovered.

Correct Answer: C

Question 4

What is the difference between a restricted and confidential document?

A. Restricted - to be shared among named individuals
Confidential - to be shared among an authorized group

B. Restricted - to be shared among named individuals
Confidential - to be shared across the organization only

C. Restricted - to be shared among an authorized group
Confidential - to be shared among named individuals

D. Restricted - to be shared among named individuals
Confidential - to be shared with friends and family

Correct Answer: A

Question 5

A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

A. Compliance

B. Availability

C. Integrity

D. Confidentiality

Correct Answer: D

Question 6

Which is not a requirement of HR prior to hiring?

A. Must undergo Awareness training on information security.

B. Applicant must complete pre-employment documentation requirements

C. Undergo background verification

D. Must successfully pass Background Investigation

Correct Answer: A

Question 7

Why do we need to test a disaster recovery plan regularly, and keep it up to date?

A. Otherwise remotely stored backups may no longer be available to the security team

B. Otherwise the measures taken and the incident procedures planned may not be adequate

C. Otherwise it is no longer up to date with the registration of daily occurring faults

Correct Answer: B

Question 8

We can leave laptops during weekdays or weekends in locked bins.

A. True

B. False

Correct Answer: B

Question 9

Who are allowed to access highly confidential files?

A. Employees with signed NDA have a business need-to-know

B. Contractors with a business need-to-know

C. Employees with a business need-to-know

D. Non-employees designated with approved access and have signed NDA

Correct Answer: A

Question 10

There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

A. Burned documents

B. Water damage due to the fire extinguishers

C. Burned computer systems

D. Melted backup tapes

Correct Answer: B

GAQM ISO 27001 : 2013 - Certified Lead Auditor - ISO27-13-001 Exam Practice Test

Latest Update

Useful Links

Contact Us