[May 12, 2022] Verified ISO-IEC-27001-Lead-Auditor dumps and 99 unique questions [Q18-Q40]

Q18. In what part of the process to grant access to a system does the user present a token?

Q19. An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?

Q20. A scenario wherein the city or location where the building(s) reside is / are not accessible.

Q21. A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?

Q22. Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

Q23. You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?

Q24. ————————-is an asset like other important business assets has value to an organization and consequently needs to be protected.

Q25. What is the standard definition of ISMS?

Q26. CMM stands for?

Q27. What is the security management term for establishing whether someone’s identity is correct?

Q28. In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

Q29. CEO sends a mail giving his views on the status of the company and the company’s future strategy and the CEO’s vision and the employee’s part in it. The mail should be classified as

Q30. In which order is an Information Security Management System set up?

Q31. Why do we need to test a disaster recovery plan regularly, and keep it up to date?

Q32. There is a scheduled fire drill in your facility. What should you do?

Q33. __________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Q34. A property of Information that has the ability to prove occurrence of a claimed event.

Q35. Stages of Information

Q36. A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?

Q37. All are prohibited in acceptable use of information assets, except:

Q38. What type of compliancy standard, regulation or legislation provides a code of practice for information security?

Q39. Below is Purpose of “Integrity”, which is one of the Basic Components of Information Security

Q40. What is the purpose of an Information Security policy?