Free ISO / IEC 27002 – Lead Implementer Exam ISO-IEC-LI Exam Practice Test

We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

• Availability, Information Value and Confidentiality
• Availability, Integrity and Confidentiality
• Availability, Integrity and Completeness
• Timeliness, Accuracy and Completeness

What is the ISO / IEC 27002 standard?

• It is a guide of good practices that describes the control objectives and recommended controls regarding information security.
• It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001
• It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

What is the objective of classifying information?

• Authorizing the use of an information system
• Creating a label that indicates how confidential the information is
• Defining different levels of sensitivity into which information may be arranged
• Displaying on the document who is permitted access

The identified owner of an asset is always an individual

• True
• False

An employee in the administrative department of Smiths Consultants Inc. finds out that the expiry date of a contract with one of the clients is earlier than the start date. What type of measure could prevent this error?

• Availability measure
• Integrity measure
• Organizational measure
• Technical measure

Why is compliance important for the reliability of the information?

• Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.
• By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.
• When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.
• When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

You have just started working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

• A code of conduct helps to prevent the misuse of IT facilities.
• A code of conduct is a legal obligation that organizations have to meet.
• A code of conduct prevents a virus outbreak.
• A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

• A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.
• A code of conduct is a standard part of a labor contract.
• A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

What should be used to protect data on removable media if data confidentiality or integrity are important considerations?

• backup on another removable medium
• cryptographic techniques
• a password
• logging

Who is accountable to classify information assets?

• the CEO
• the CISO
• the Information Security Team
• the asset owner