ISO27-13-001無料問題集「GAQM ISO 27001 : 2013

質問 1

We can leave laptops during weekdays or weekends in locked bins.

（A）False

（B）True

正解：A 解答を投票する

質問 2

Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.

（A）CSM

（B）COO

（C）CISO

（D）MRO

正解：C 解答を投票する

質問 3

A scenario wherein the city or location where the building(s) reside is / are not accessible.

（A）City

（B）Country

（C）Facility

（D）Component

正解：A 解答を投票する

質問 4

In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

（A）The indispensability of data for the business processes.

（B）The importance of the business processes that make use of the data.

（C）The content of data.

（D）The degree to which missing, incomplete or incorrect data can be recovered.

正解：C 解答を投票する

質問 5

How is the purpose of information security policy best described?

（A）An information security policy documents the analysis of risks and the search for countermeasures.

（B）An information security policy provides direction and support to the management regarding information security.

（C）An information security policy provides insight into threats and the possible consequences.

（D）An information security policy makes the security plan concrete by providing it with the necessary details.

正解：B 解答を投票する

質問 6

A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

（A）This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

（B）This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

正解：B 解答を投票する

質問 7

Availability means

（A）Service should be accessible at the required time and usable by all

（B）Service should be accessible at the required time and usable only by the authorized entity

（C）Service should not be accessible when required

正解：B 解答を投票する

質問 8

Which of the following does an Asset Register contain? (Choose two)

（A）Asset Type

（B）Asset Modifier

（C）Process ID

（D）Asset Owner

正解：A、D 解答を投票する

質問 9

The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?

（A）a physical security measure

（B）a logical security measure

（C）a repressive security measure

（D）a corrective security measure

正解：A 解答を投票する

質問 10

Who are allowed to access highly confidential files?

（A）Employees with signed NDA have a business need-to-know

（B）Contractors with a business need-to-know

（C）Employees with a business need-to-know

（D）Non-employees designated with approved access and have signed NDA

正解：A 解答を投票する

ISO27-13-001 無料問題集「GAQM ISO 27001 : 2013 - Certified Lead Auditor」

弊社を連絡する

関連リンク

トップ試験