ISO-IEC-27001-LEAD-AUDITOR Exam Questions

What is the difference between a restricted and confidential document?

CEO sends a mail giving his views on the status of the company and the company's future strategy and the CEO's vision and the employee's part in it. The mail should be classified a...

You see a blue color sticker on certain physical assets. What does this signify?

Integrity of data means

You have a hard copy of a customer design document that you want to dispose off. What would you do?

You receive the following mail from the IT support team: Dear User,Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below detai...

The following are definitions of Information, except:

In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:

What is the standard definition of ISMS?

Information or data that are classified as ______ do not require labeling.

A property of Information that has the ability to prove occurrence of a claimed event.

Stages of Information

A decent visitor is roaming around without visitor's ID. As an employee you should do the following, except:

Which of the following is not a type of Information Security attack?

The following are purposes of Information Security, except:

The following are the guidelines to protect your password, except:

Phishing is what type of Information Security Incident?

Information Security is a matter of building and maintaining ________ .

All are prohibited in acceptable use of information assets, except:

In acceptable use of Information Assets, which is the best practice?

CMM stands for?

Which is not a requirement of HR prior to hiring?

Who are allowed to access highly confidential files?

Which is the glue that ties the triad together

Implement plan on a test basis - this comes under which section of PDCA

What is we do in ACT - From PDCA cycle

-------------------------is an asset like other important business assets has value to an organization and consequently needs to be protected.

Below is Purpose of "Integrity", which is one of the Basic Components of Information Security

Which one of the following options best describes the main purpose of a Stage 1 third-party audit?

Which two of the following statements are true?

Which two activities align with the "Check'' stage of the Plan-Do-Check-Act cycle when applied to the process of managing an internal audit program as described in ISO 19011?

Which two of the following are examples of audit methods that 'do' involve human interaction?

In the context of a third-party certification audit, confidentiality is an issue in an audit programme. Select two options which correctly state the function of confidentiality in...

Which three of the following phrases are objectives' in relation to an audit?

Which six of the following actions are the individual(s) managing the audit programme responsible for?

Which three of the following work documents are not required for audit planning by an auditor conducting a certification audit?

Which three of the following options are an advantage of using a sampling plan for the audit?

After completing Stage 1 and in preparation for a Stage 2 initial certification audit, the auditee informs the audit team leader that they wish to extend the audit scope to include...

During discussions with the individual(s) managing the audit programme of a certification body, the Management System Representative of the client organisation asks for a specific...

During an opening meeting of a Stage 2 audit, the Managing Director of the client organisation invites the audit team to view a new company video lasting 45 minutes. Which two of t...

You are an ISMS auditor conducting a third-party surveillance audit of a telecom's provider. You are in the equipment staging room where network switches are pre-programmed before...

During a third-party certification audit you are presented with a list of issues by an auditee. Which four of the following constitute 'external' issues in the context of a managem...

You are performing an ISMS audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to verify the information security incident ma...

You are an experienced audit team leader guiding an auditor in training, Your team is currently conducting a third-party surveillance audit of an organisation that stores data on b...

You are preparing the audit findings. Select two options that are correct.

You are an experienced ISMS auditor, currently providing support to an ISMS auditor in training who is carrying out her first initial certification audit. She asks you what she sho...

You are carrying out your first third-party ISMS surveillance audit as an Audit Team Leader. You are presently in the auditee's data centre with another member of your audit team....

You are performing an ISMS audit at a nursing home where residents always wear an electronic wristband for monitoring their location, heartbeat, and blood pressure. The wristband a...

The data center at which you work is currently seeking ISO/IEC27001:2022 certification. In preparation for your initial certification visit a number of internal audits have been ca...

You are conducting a third-party surveillance audit when another member of the audit team approaches you seeking clarification. They have been asked to assess the organisation's ap...