Latest [Nov 21, 2021] Realistic Verified ISO-ISMS-LA Dumps
Pass GAQM ISO-ISMS-LA Exam Updated 99 Questions
NEW QUESTION 13
You have a hard copy of a customer design document that you want to dispose off. What would you do
- A. Be environment friendly and reuse it for writing
- B. Give it to the office boy to reuse it for other purposes
- C. Shred it using a shredder
- D. Throw it in any dustbin
Answer: C
NEW QUESTION 14
What is the standard definition of ISMS?
- A. Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization's reputation.
- B. A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving
- C. A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization's information security to achieve business objectives.
- D. A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security
Answer: C
NEW QUESTION 15
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?
- A. Formulate a policy
- B. Encrypt all sensitive information
- C. Set up an access control procedure
- D. Appoint security staff
Answer: A
NEW QUESTION 16
A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:
- A. planning for continuous improvement.
- B. plan, do, check, act.
- C. RACI Matrix
- D. time based planning.
Answer: B
NEW QUESTION 17
Changes to the information processing facilities shall be done in controlled manner.
- A. False
- B. True
Answer: B
NEW QUESTION 18
Which of the following is an information security management system standard published by the International Organization for Standardization?
- A. ISO27001
- B. ISO5501
- C. ISO22301
- D. ISO9008
Answer: A
NEW QUESTION 19
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?
- A. Social engineering threat
- B. Malware threat
- C. Technical threat
- D. Organisational threat
Answer: A
NEW QUESTION 20
You see a blue color sticker on certain physical assets. What does this signify?
- A. The asset is critical and the impact is restricted to an employee only
- B. The asset with blue stickers should be kept air conditioned at all times
- C. The asset is high critical and its failure will affect a group/s/project's work in the organization
- D. The asset is very high critical and its failure affects the entire organization
Answer: C
NEW QUESTION 21
Who are allowed to access highly confidential files?
- A. Non-employees designated with approved access and have signed NDA
- B. Employees with a business need-to-know
- C. Employees with signed NDA have a business need-to-know
- D. Contractors with a business need-to-know
Answer: C
NEW QUESTION 22
CEO sends a mail giving his views on the status of the company and the company's future strategy and the CEO's vision and the employee's part in it. The mail should be classified as
- A. Restricted Mail
- B. Public Mail
- C. Internal Mail
- D. Confidential Mail
Answer: C
NEW QUESTION 23
After a fire has occurred, what repressive measure can be taken?
- A. Buying in a proper fire insurance policy
- B. Repairing all systems after the fire
- C. Extinguishing the fire after the fire alarm sounds
Answer: C
NEW QUESTION 24
An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?
- A. risk
- B. threat
- C. vulnerability
- D. dependency
Answer: B
NEW QUESTION 25
In what part of the process to grant access to a system does the user present a token?
- A. Authentication
- B. Identification
- C. Verification
- D. Authorisation
Answer: B
NEW QUESTION 26
Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.
- A. MRO
- B. CSM
- C. CISO
- D. COO
Answer: C
NEW QUESTION 27
Which of the following does a lack of adequate security controls represent?
- A. Threat
- B. Vulnerability
- C. Impact
- D. Asset
Answer: B
NEW QUESTION 28
Which of the following is not a type of Information Security attack?
- A. Privacy Incidents
- B. Vehicular Incidents
- C. Legal Incidents
- D. Technical Vulnerabilities
Answer: B
NEW QUESTION 29
What is the name of the system that guarantees the coherence of information security in the organization?
- A. Rootkit
- B. Security regulations for special information for the government
- C. Information Technology Service Management (ITSM)
- D. Information Security Management System (ISMS)
Answer: D
NEW QUESTION 30
Implement plan on a test basis - this comes under which section of PDCA
- A. Act
- B. Do
- C. Plan
- D. Check
Answer: B
NEW QUESTION 31
What is a definition of compliance?
- A. Laws, considered collectively or the process of making or enacting laws
- B. The state or fact of according with or meeting rules or standards
- C. A rule or directive made and maintained by an authority.
- D. An official or authoritative instruction
Answer: B
NEW QUESTION 32
We can leave laptops during weekdays or weekends in locked bins.
- A. False
- B. True
Answer: A
NEW QUESTION 33
There is a scheduled fire drill in your facility. What should you do?
- A. None of the above
- B. Call in sick
- C. Excuse yourself by saying you have an urgent deliverable
- D. Participate in the drill
Answer: D
NEW QUESTION 34
What would be the reference for you to know who should have access to data/document?
- A. Information Rights Management (IRM)
- B. Data Classification Label
- C. Access Control List (ACL)
- D. Masterlist of Project Records (MLPR)
Answer: C
NEW QUESTION 35
Which measure is a preventive measure?
- A. Putting sensitive information in a safe
- B. Installing a logging system that enables changes in a system to be recognized
- C. Shutting down all internet traffic after a hacker has gained access to the company systems
Answer: A
NEW QUESTION 36
A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?
- A. confidentiality
- B. correctness
- C. integrity
- D. availability
Answer: C
NEW QUESTION 37
What is a repressive measure in case of a fire?
- A. Putting out a fire after it has been detected by a fire detector
- B. Repairing damage caused by the fire
- C. Taking out a fire insurance
Answer: A
NEW QUESTION 38
......
Get 2021 Updated Free GAQM ISO-ISMS-LA Exam Questions & Answer: https://www.pass4training.com/ISO-ISMS-LA-pass-exam-training.html
