Real ISO-IEC-27001-Lead-Auditor Dumps – PECB Correct Answers updated on 2023 [Q48-Q69]

QUESTION 48
During an opening meeting of a Stage 2 audit, the Managing Director of the client organisation invites the audit team to view a new company video lasting 45 minutes. Which two of the following responses should the audit team leader make?

QUESTION 49
A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

QUESTION 50
A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company’s information is worth more and more and gone are the days when you could keep control yourself. You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

QUESTION 51
You are performing an ISMS audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to verify the information security incident management process. The IT Security Manager presents the information security incident management procedure and explains that the process is based on ISO/IEC 27035-1:2016.
You review the document and notice a statement “any information security weakness, event, and incident should be reported to the Point of Contact (PoC) within 1 hour after identification”. When interviewing staff, you found that there were differences in the understanding of the meaning of “weakness, event, and incident”.
You sample incident report records from the event tracking system for the last 6 months with summarized results in the following table.

You would like to further investigate other areas to collect more audit evidence. Select two options that will not be in your audit trail.

QUESTION 52
Integrity of data means

QUESTION 53
Which department maintain’s contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

QUESTION 54
A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

QUESTION 55
Does the security have the right to ask you to display your ID badges and check your bags?

QUESTION 56
Which reliability aspect of information is compromised when a staff member denies having sent a message?

QUESTION 57
Which of the following factors does NOT contribute to the value of data for an organisation?

QUESTION 58
What is the security management term for establishing whether someone’s identity is correct?

QUESTION 59
A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?

QUESTION 60
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

QUESTION 61
Which measure is a preventive measure?

QUESTION 62
Which is not a requirement of HR prior to hiring?

QUESTION 63
You receive an E-mail from some unknown person claiming to be representative of your bank and asking for your account number and password so that they can fix your account. Such an attempt of social engineering is called

QUESTION 64
What is the standard definition of ISMS?

QUESTION 65
Access Control System, CCTV and security guards are form of:

QUESTION 66
Which department maintain’s contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

QUESTION 67
Integrity of data means

QUESTION 68
Phishing is what type of Information Security Incident?

QUESTION 69
You are an experienced ISMS audit team leader, talking to an Auditor in training who has been assigned to your audit team. You want to ensure that they understand the importance of the Check stage of the Plan-Do-Check-Act cycle in respect of the operation of the information security management system.
You do this by asking him to select the words that best complete the sentence:
To complete the sentence with the best word(s), click on the blank section you want to complete so that it is highlighted in red, and then click on the applicable text from the options below. Alternatively, you may drag and drop the option to the appropriate blank section.