ISO-IEC-27001 Lead Auditor 시험 - PECB실제시험문제와 답 - 100문항

Question No : 1

Information Security is a matter of building and maintaining ________ .

A.Confidentiality
B.Trust
C.Protection
D.Firewalls

정답:

Question No : 2

Information or data that are classified as ______ do not require labeling.

A.Public
B.Internal
C.Confidential
D.Highly Confidential

정답:

Question No : 3

What is the purpose of an Information Security policy?

A.An information security policy makes the security plan concrete by providing the necessary details
B.An information security policy provides insight into threats and the possible consequences
C.An information security policy provides direction and support to the management regarding information security
D.An information security policy documents the analysis of risks and the search for countermeasures

정답:

Question No : 4

What is the relationship between data and information?

A.Data is structured information.
B.Information is the meaning and value assigned to a collection of data.

정답:

Question No : 5

Implement plan on a test basis - this comes under which section of PDCA

A.Plan
B.Do
C.Act
D.Check

정답:

Question No : 6

We can leave laptops during weekdays or weekends in locked bins.

A.True
B.False

정답:

Question No : 7

Who is authorized to change the classification of a document?

A.The author of the document
B.The administrator of the document
C.The owner of the document
D.The manager of the owner of the document

정답:

Question No : 8

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

A.Identifying assets and their value
B.Implementing counter measures
C.Establishing a balance between the costs of an incident and the costs of a security measure
D.Determining relevant vulnerabilities and threats

정답:

Question No : 9

You see a blue color sticker on certain physical assets.
What does this signify?

A.The asset is very high critical and its failure affects the entire organization
B.The asset with blue stickers should be kept air conditioned at all times
C.The asset is high critical and its failure will affect a group/s/project's work in the organization
D.The asset is critical and the impact is restricted to an employee only

정답:

Question No : 10

Availability means

A.Service should be accessible at the required time and usable by all
B.Service should be accessible at the required time and usable only by the authorized entity
C.Service should not be accessible when required

정답:

Question No : 11

The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?

A.a corrective security measure
B.a physical security measure
C.a logical security measure
D.a repressive security measure

정답:

Question No : 12

__________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

A.Trojan
B.Operating System
C.Virus
D.Malware

정답:

Question No : 13

In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

A.The content of data.
B.The degree to which missing, incomplete or incorrect data can be recovered.
C.The indispensability of data for the business processes.
D.The importance of the business processes that make use of the data.

정답:

Question No : 14

All are prohibited in acceptable use of information assets, except:

A.Electronic chain letters
B.E-mail copies to non-essential readers
C.Company-wide e-mails with supervisor/TL permission.
D.Messages with very large attachments or to a large number ofrecipients.

정답:

Question No : 15

Which threat could occur if no physical measures are taken?

A.Unauthorised persons viewing sensitive files
B.Confidential prints being left on the printer
C.A server shutting down because of overheating
D.Hackers entering the corporate network

정답:

PECB ISO-IEC-27001 Lead Auditor 시험