PECB iso iec 27001 lead auditor practice test

Information Security is a matter of building and maintaining ________ .

• A. Confidentiality
• B. Trust
• C. Protection
• D. Firewalls

Phishing is what type of Information Security Incident?

• A. Private Incidents
• B. Cracker/Hacker Attacks Most Votes
• C. Technical Vulnerabilities
• D. Legal Incidents

The following are the guidelines to protect your password, except: 

• A. Don't use the same password for various company system security access
• B. Do not share passwords with anyone
• C. For easy recall, use the same password for company and personal accounts
• D. Change a temporary password on first log-on

The following are purposes of Information Security, except:

• A. Ensure Business Continuity
• B. Minimize Business Risk
• C. Increase Business Assets Most Votes
• D. Maximize Return on Investment

Which of the following is not a type of Information Security attack?

• A. Legal Incidents
• B. Vehicular Incidents Most Votes
• C. Technical Vulnerabilities
• D. Privacy Incidents

A decent visitor is roaming around without visitor's ID. As an employee you should do the following,
except:

• A. Say "hi" and offer coffee
• B. Call the receptionist and inform about the visitor
• C. Greet and ask him what is his business
• D. Escort him to his destination

Stages of Information 

• A. creation, evolution, maintenance, use, disposition
• B. creation, use, disposition, maintenance, evolution
• C. creation, distribution, use, maintenance, disposition 
• D. creation, distribution, maintenance, disposition, use

A property of Information that has the ability to prove occurrence of a claimed event.

• A. Electronic chain letters 
• B. Integrity
• C. Availability
• D. Accessibility

Information or data that are classified as ______ do not require labeling.

• A. Public
• B. Internal
• C. Confidential
• D. Highly Confidential

What is the standard definition of ISMS? 

• A. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation.
• B. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving C. A project-based approach to achieve business objectives for establishing, implementing,operating, monitoring, reviewing, maintaining and improving an organizations information security
• D. A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintainingand improving an organizations information security to achieve business objectives.

In the event of an Information security incident, system users' roles and responsibilities are to be
observed, except:

• A. Report suspected or known incidents upon discovery through the Servicedesk
• B. Preserve evidence if necessary
• C. Cooperate with investigative personnel during investigation if needed
• D. Make the information security incident details known to all employees

The following are definitions of Information, except:

• A. accurate and timely data
• B. specific and organized data for a purpose
• C. mature and measurable data
• D. can lead to understanding and decrease in uncertainty

You receive the following mail from the IT support team: Dear User,Starting next week, we will be
deleting all inactive email accounts in order tocreate spaceshare the below details in order to
continue using your account. In case ofno response,
Name:
Email ID:
Password:
DOB:
Kindly contact the webmail team for any further support. Thanks for your attention.
Which of the following is the best response?

• A. Ignore the email
• B. Respond it by saying that one should not share the password with anyone
• C. One should not respond to these mails and report such email to your supervisor 

You have a hard copy of a customer design document that you want to dispose off. What would you
do

• A. Throw it in any dustbin
• B. Shred it using a shredder
• C. Give it to the office boy to reuse it for other purposes
• D. Be environment friendly and reuse it for writing

Integrity of data means

• A. Accuracy and completeness of the data
• B. Data should be viewable at all times
• C. Data should be accessed by only the right people