ISO-IEC-27001-LEAD-AUDITOR Exam Questions

You are performing an ISMS audit at a nursing home where residents always wear an electronic wristband for monitoring their location, heartbeat, and blood pressure. The wristband a...

The data center at which you work is currently seeking ISO/IEC27001:2022 certification. In preparation for your initial certification visit a number of internal audits have been ca...

You are conducting a third-party surveillance audit when another member of the audit team approaches you seeking clarification. They have been asked to assess the organisation's ap...

You are performing an ISMS audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to verify the information security of the busi...

You are carrying out your first third-party ISMS surveillance audit as an Audit Team Leader. You are presently in the auditee's data centre with another member of your audit team....

Drag and Drop Question You are an experienced ISMS audit team leader providing instruction to an auditor in training. They are unclear in their understanding of risk processes and...

You are performing an ISMS initial certification audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to conduct the closing m...

You are an ISMS audit team leader tasked with conducting a follow-up audit at a client's data centre. Following two days on-site you conclude that of the original 12 minor and 1 ma...

You are an experienced ISMS audit team leader guiding an auditor in training. Your team has just completed a third-party surveillance audit of a mobile telecom provider. The audito...

You are an experienced ISMS audit team leader guiding an auditor in training. You are testing her understanding of follow-up audits by asking her a series of questions to which the...

Drag and Drop Question As the ISMS audit team leader, you are conducting a second-party audit of an international logistics company on behalf of an online retailer. During the audi...

You are conducting an ISMS audit in the despatch department of an international logistics organisation that provides shipping services to large organisations including local hospit...

You are conducting an ISMS audit in the despatch department of an international logistics organisation that provides shipping services to large organisations including local hospit...

Which two of the following statements are true?

Drag and Drop Question The following options are key actions involved in a first-party audit. Order the stages to show the sequence in which the actions should take place. Answer:

Which two of the following phrases would apply to "plan" in relation to the Plan-Do-Check-Act cycle for a business process?

Which two of the following phrases are 'objectives' in relation to a first-party audit?

Drag and Drop Question Match the correct responsibility with each participant of a second-party audit: Answer:

Which one of the following options describes the main purpose of a Stage 1 audit?

Objectives, criteria, and scope are critical features of a third-party ISMS audit. Which two issues are audit objectives?

Which two of the following are examples of audit methods that 'do not' involve human interaction?

Select two options that describe an advantage of using a checklist.

Which one of the following statements best describes the purpose of conducting a document review?

Drag and Drop Question Select the words that best complete the sentence to descirbe an audit finding. Answer:

During a Stage 1 audit opening meeting, the Management System Representative (MSR) asks to extend the audit scope to include a new site overseas which they have expanded into since...

You have to carry out a third-party virtual audit. Which two of the following issues would you need to inform the auditee about before you start conducting the audit?

Drag and Drop Question You have just completed a scheduled information security audit of your organisation when the IT Manager approaches you and asks for your assistance in the re...

You ask the IT Manager why the organisation still uses the mobile app while personal data encryption and pseudonymisation tests failed. Also, whether the Service Manager is authori...

You ask the IT Manager why the organisation still uses the mobile app while personal data encryption and pseudonymization tests failed. Also, whether the Service Manager is authori...

During a third-party certification audit, you are presented with a list of issues by an auditee. Which four of the following constitute 'internal' issues in the context of a manage...

You are an experienced ISMS audit team leader. During the conducting of a third-party surveillance audit, you decide to test your auditee's knowledge of ISO/IEC 27001's risk manage...

You are performing an ISMS audit at a residential nursing home called ABC that provides healthcare services. You find all nursing home residents wear an electronic wristband for mo...

You are an experienced ISMS audit team leader providing guidance to an ISMS auditor in training. They have been asked to carry out an assessment of external providers and have prep...

You are an experienced ISMS auditor conducting a third-party surveillance audit at an organisation which offers ICT reclamation services. ICT equipment which companies no longer re...

Drag and Drop Question You are an experienced ISMS audit team leader. An auditor in training has approached you to ask you to clarify the different types of audits she may be requi...

You are performing an ISMS audit at a residential nursing home railed ABC that provides healthcare services. The next step in your audit plan is to verify the effectiveness of the...

You are an ISMS audit team leader who has been assigned by your certification body to carry out a follow-up audit of a client. You are preparing your audit plan for this audit. Whi...

During a follow-up audit, you notice that a nonconformity identified for completion before the follow-up audit is still outstanding. Which four of the following actions should you...

You are performing an ISO 27001 ISMS surveillance audit at a residential nursing home, ABC Healthcare Services. ABC uses a healthcare mobile app designed and maintained by a suppli...

Which one of the following options is the definition of an interested party?

Which two of the following statements are true?

Drag and Drop Question Select the words that best complete the sentence: "The purpose of maintaining regulatory compliance in a management system is to To complete the sentence wit...

Which two of the following phrases would apply to 'check' in the Plan-Do-Check-Act cycle for a business process?

Drag and Drop Question Select the words that best complete the sentence: Answer:

Which two of the following actions are the individual(s) managing the audit programme responsible for?

Drag and Drop Question The audit lifecycle describes the ISO 19011 process for conducting an individual audit. Drag and drop the steps of the audit lifecycle into the correct seque...

You are the person responsible for managing the audit programme and deciding the size and composition of the audit team for a specific audit. Select the two factors that should be...

Drag and Drop Question Auditors need to communicate effectively with auditees. Therefore, their personal behaviour is a key characteristic needed to ensure a successful audit. Belo...

Select two of the following options that are the responsibility of a legal technical expert on the audit team during a certification audit.

The audit team leader prepares the audit plan for an initial certification stage 2 audit to ISO/IEC 27001:2022. Which one of the following statements is true?