ISO27-13-001 by GAQM Actual Free Exam Q&As

Question 1

Information has a number of reliability aspects. Reliability is constantly being threatened. Examples of threats are: a cable becomes loose, someone alters information by accident, data is used privately or is falsified.
Which of these examples is a threat to integrity?

A. private use of data B. a loose cable C. accidental alteration of data D. System restart

Discussion 0

Correct Answer: C Vote an answer

Question 2

A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?

A. between incident and damage B. between recovery and threat C. between threat and incident D. between damage and recovery

Discussion 0

Correct Answer: A Vote an answer

Question 3

CMM stands for?

A. Capable Mature Model B. Capacity Maturity Matrix C. Capability Maturity Matrix D. Capability Maturity Model

Discussion 0

Correct Answer: D Vote an answer

Question 4

In what part of the process to grant access to a system does the user present a token?

A. Verification B. Authentication C. Authorisation D. Identification

Discussion 0

Correct Answer: D Vote an answer

Question 5

How is the purpose of information security policy best described?

A. An information security policy documents the analysis of risks and the search for countermeasures. B. An information security policy makes the security plan concrete by providing it with the necessary details. C. An information security policy provides insight into threats and the possible consequences. D. An information security policy provides direction and support to the management regarding information security.

Discussion 0

Correct Answer: D Vote an answer

Question 6

In acceptable use of Information Assets, which is the best practice?

A. Accessing phone or network transmissions, including wireless or wifi transmissions B. Playing any computer games during office hours C. Interfering with or denying service to any user other than the employee's host D. Access to information and communication systems are provided for business purpose only

Discussion 0

Correct Answer: D Vote an answer

Question 7

Four types of Data Classification (Choose two)

A. Financial Data, Highly Confidential Data B. Unrestricted Data, Highly Confidential Data C. Project Data, Highly Confidential Data D. Restricted Data, Confidential Data

Discussion 0

Correct Answer: B,D Vote an answer

Question 8

Does the security have the right to ask you to display your ID badges and check your bags?

A. False B. True

Discussion 0

Correct Answer: B Vote an answer

Question 9

What would be the reference for you to know who should have access to data/document?

A. Access Control List (ACL) B. Data Classification Label C. Information Rights Management (IRM) D. Masterlist of Project Records (MLPR)

Discussion 0

Correct Answer: A Vote an answer

Question 10

What is the standard definition of ISMS?

A. A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security B. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation. C. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving D. A systematic approach for establishing, implementing,operating,monitoring, reviewing, maintaining and improving an organization's information security to achieve business objectives.

Discussion 0

Correct Answer: D Vote an answer

GAQM ISO 27001 : 2013 - Certified Lead Auditor - ISO27-13-001 Exam Practice Test