Free ISO / IEC 27002 – Lead Implementer Exam ISO-IEC-LI Exam Practice Test

Physical labels and ________ are two common forms of labeling which are mentioned in ISO 27002.

• metadata
• teradata
• bridge

You have just started working at a large organization. You have been asked to sign a code of conduct as well as a contract. What does the organization wish to achieve with this?

• A code of conduct helps to prevent the misuse of IT facilities.
• A code of conduct is a legal obligation that organizations have to meet.
• A code of conduct prevents a virus outbreak.
• A code of conduct gives staff guidance on how to report suspected misuses of IT facilities.

Companies use 27002 for compliance for which of the following reasons:

• A structured program that helps with security and compliance
• Explicit requirements for all regulations
• Compliance with ISO 27002 is sufficient to comply with all regulations

One of the ways Internet of Things (IoT) devices can communicate with each other (or 'the outside world') is using a so-called short-range radio protocol. Which kind of short-range radio protocol makes it possible to use your phone as a credit card?

• Near Field Communication (NFC)
• Bluetooth
• Radio Frequency Identification (RFID)
• The 4G protocol

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

• A code of conduct specifies how employees are expected to conduct themselves and is the same for all companies.
• A code of conduct is a standard part of a labor contract.
• A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

What should be used to protect data on removable media if data confidentiality or integrity are important considerations?

• backup on another removable medium
• cryptographic techniques
• a password
• logging

What is the ISO / IEC 27002 standard?

• It is a guide of good practices that describes the control objectives and recommended controls regarding information security.
• It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001
• It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

How many domains does ISO / IEC 27002: 2013 have?

• 140
• 14
• 110
• 114

What is the best description of a risk analysis?

• A risk analysis is a method of mapping risks without looking at company processes.
• A risk analysis helps to estimate the risks and develop the appropriate security measures.
• A risk analysis calculates the exact financial consequences of damages.

Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

• ISO/IEC 27001:2005
• Intellectual Property Rights
• ISO/IEC 27002:2005
• Personal data protection legislation