ISO27-13-001 ISO 27001 : 2013 - Certified Lead Auditor Questions and Answers

Don't use the same password for various company system security access

Do not share passwords with anyone

For easy recall, use the same password for company and personal accounts

Change a temporary password on first log-on

Component

Facility

City

Country

Employees with a business need-to-know

Contractors with a business need-to-know

Employees with signed NDA have a business need-to-know

Non-employees designated with approved access and have signed NDA

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

a loose cable

accidental alteration of data

private use of data

System restart

the property that information is not made available or disclosed to unauthorized individuals

the property of safeguarding the accuracy and completeness of assets.

the property that information is not made available or disclosed to unauthorized individuals

the property of being accessible and usable upon demand by an authorized entity.

Take actions to continually monitor process performance

Take actions to continually improve process performance

Take actions to continually monitor process performance

Take actions to continually improve people performance

a corrective security measure

a physical security measure

a logical security measure

a repressive security measure

Between incident and damage

Between detection and classification

Between recovery and normal operations

Between classification and escalation

Restricted Data, Confidential Data

Project Data, Highly Confidential Data

Financial Data, Highly Confidential Data

Unrestricted Data, Highly Confidential Data

Ignore the email

Respond it by saying that one should not share the password with anyone

One should not respond to these mails and report such email to your supervisor

An information security policy documents the analysis of risks and the search for countermeasures.

An information security policy provides direction and support to the management regarding information security.

An information security policy makes the security plan concrete by providing it with the necessary details.

An information security policy provides insight into threats and the possible consequences.

Shoulder Surfing

Mountaineering

Phishing

Spoofing

Ensure Business Continuity

Minimize Business Risk

Increase Business Assets

Maximize Return on Investment

Taking out a fire insurance

Putting out a fire after it has been detected by a fire detector

Repairing damage caused by the fire

Accuracy and completeness of the data

Data should be viewable at all times

Data should be accessed by only the right people

Authorisation

Verification

Authentication

Identification

Confidentiality

Integrity

Availability

Correctness

True

False

Data is a collection of structured and unstructured information

Information consists of facts and statistics collected together for reference or analysis

When meaning and value are assigned to data, it becomes information

Internal Mail

Public Mail

Confidential Mail

Restricted Mail

Natural threat

Organizational threat

Social Engineering

Arason

Asset

Vulnerability

Impact

Threat

Legal Incidents

Vehicular Incidents

Technical Vulnerabilities

Privacy Incidents

Participate in the drill

Excuse yourself by saying you have an urgent deliverable

Call in sick

None of the above

Availability

Confidentiality

Integrity

Authenticity

True

False