ISO27-13-001 Online Practice Questions and Answers

Why do we need to test a disaster recovery plan regularly, and keep it up to date?

A. Otherwise the measures taken and the incident procedures planned may not be adequate

B. Otherwise it is no longer up to date with the registration of daily occurring faults

C. Otherwise remotely stored backups may no longer be available to the security team

A member of staff denies sending a particular message. Which reliability aspect of information is in danger here?

A. availability

B. correctness

C. integrity

D. confidentiality

What is we do in ACT - From PDCA cycle?

A. Take actions to continually monitor process performance

B. Take actions to continually improve process performance

C. Take actions to continually monitor process performance

D. Take actions to continually improve people performance

Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

A. COO

B. CISO

C. CSM

D. MRO

A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?

A. Availability

B. Confidentiality

C. Integrity

D. Authenticity

What is the name of the system that guarantees the coherence of information security in the organization?

A. Information Security Management System (ISMS)

B. Rootkit

C. Security regulations for special information for the government

D. Information Technology Service Management (ITSM)

What would be the reference for you to know who should have access to data/document?

A. Data Classification Label

B. Access Control List (ACL)

C. Masterlist of Project Records (MLPR)

D. Information Rights Management (IRM)

What is the security management term for establishing whether someone's identity is correct?

A. Identification

B. Authentication

C. Authorisation

D. Verification

What is the relationship between data and information?

A. Data is structured information.

B. Information is the meaning and value assigned to a collection of data.

__________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

A. Trojan

B. Operating System

C. Virus

D. Malware