ISO-IEC-27001-LEAD-AUDITOR Online Practice Questions and Answers

The following are the guidelines to protect your password, except: (Choose two)

A. Don't use the same password for various company system security access

B. Do not share passwords with anyone

C. For easy recall, use the same password for company and personal accounts

D. Change a temporary password on first log-on

How are data and information related?

A. Data is a collection of structured and unstructured information

B. Information consists of facts and statistics collected together for reference or analysis

C. When meaning and value are assigned to data, it becomes information

Phishing is what type of Information Security Incident?

A. Private Incidents

B. Cracker/Hacker Attacks

C. Technical Vulnerabilities

D. Legal Incidents

A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:

A. Say "hi" and offer coffee

B. Call the receptionist and inform about the visitor

C. Greet and ask him what is his business

D. Escort him to his destination

You receive the following mail from the IT support team: Dear User,Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below details in order to continue using your account. In case of no

response,

Name:

Email ID:

Password:

DOB:

Kindly contact the webmail team for any further support. Thanks for your attention.

Which of the following is the best response?

A. Ignore the email

B. Respond it by saying that one should not share the password with anyone

C. One should not respond to these mails and report such email to your supervisor

Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

A. Confidentiality cannot be guaranteed

B. Integrity cannot be guaranteed

C. Authenticity cannot be guaranteed

D. Availability cannot be guaranteed

A property of Information that has the ability to prove occurrence of a claimed event.

A. Electronic chain letters

B. Integrity

C. Availability

D. Accessibility

An administration office is going to determine the dangers to which it is exposed.

What do we call a possible event that can have a disruptive effect on the reliability of information?

A. dependency

B. threat

C. vulnerability

D. risk

In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

A. Report suspected or known incidents upon discovery through the Servicedesk

B. Preserve evidence if necessary

C. Cooperate with investigative personnel during investigation if needed

D. Make the information security incident details known to all employees

In acceptable use of Information Assets, which is the best practice?

A. Access to information and communication systems are provided for business purpose only

B. Interfering with or denying service to any user other than the employee's host

C. Playing any computer games during office hours

D. Accessing phone or network transmissions, including wireless or wifi transmissions