Question 1

What do employees need to know to report a security incident?

Options :

A : How to report an incident and to whom.

B : Whether the incident has occurred before and what was the resulting damage.

C : The measures that should have been taken to prevent the incident in the first place.

D : Who is responsible for the incident and whether it was intentional.

Answer: A

Question 2

Which of the following is the most suitable option for presenting raw data in a user-friendly, easy-to-read format?

Options :

A : Scorecards

B : Reports

C : Gages

Answer: A

Question 3

Scenario 6: Skyver offers worldwide shipping of electronic products, including gaming consoles, flat-screen TVs. computers, and printers. In order to ensure information security, the company has decided to implement an information security management system (ISMS) based on the requirements of ISO/IEC 27001. Colin, the company's best information security expert, decided to hold a training and awareness session for the personnel of the company regarding the information security challenges and other information security-related controls. The session included topics such as Skyver's information security approaches and techniques for mitigating phishing and malware. One of the participants in the session is Lisa, who works in the HR Department. Although Colin explains the existing Skyver's information security policies and procedures in an honest and fair manner, she finds some of the issues being discussed too technical and does not fully understand the session. Therefore, in a lot of cases, she requests additional help from the trainer and her colleagues Based on the scenario above, answer the following question: How should Colin have handled the situation with Lisa?

Options :

A : Extend the duration of the training and awareness session in order to be able to achieve better results

B : Promise Lisa that future training and awareness sessions will be easily understandable

C :

Deliver training and awareness sessions for employees with the same level of competence needs based on the activities they perform within the company

Answer: C

Question 4

Which statement regarding organizational roles, responsibilities, and authorities isNOTcorrect?

Options :

A :

Top management is responsible for reporting on the performance of the ISMS and cannot assign this responsibility to someone else

B : A project manager can have information security responsibilities as well

C : Top management must assign the responsibility for ensuring that the ISMS conforms to ISO/IEC 27001

Answer: A

Question 5

Based on ISO/IEC 27001, what areas within the organization require establishing rules, procedures, and agreements for information transfer?

Options :

A : Internal file-sharing platforms and shared drives

B : Public and private cloud services and partner collaboration platforms

C : All transfer facilities within the organization

Answer: C

Higher Test Marks with Free Online ISO-IEC-27001-Lead-Implementer Exam Practice

Buying Options: