GAQM ISO27-13-001 Exam Questions Free Practice Test

Viewing page 2 out of 3 pages

Viewing questions 11-20 out of questions

Questions # 11:

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.

What is not one of the four main objectives of a risk analysis?

Options:

Identifying assets and their value

Implementing counter measures

Establishing a balance between the costs of an incident and the costs of a security measure

Determining relevant vulnerabilities and threats

Expert Solution

Questions # 12:

Who is responsible for Initial asset allocation to the user/custodian of the assets?

Options:

Asset Manager

Asset Owner

Asset Practitioner

Asset Stakeholder

Expert Solution

Questions # 13:

What is social engineering?

Options:

A group planning for a social activity in the organization

Creating a situation wherein a third party gains confidential information from you

The organization planning an activity for welfare of the neighborhood

Expert Solution

Questions # 14:

Which of the following is a technical security measure?

Options:

Encryption

Security policy

Safe storage of backups

User role profiles.

Expert Solution

Questions # 15:

Implement plan on a test basis - this comes under which section of PDCA

Options:

Plan

Act

Check

Expert Solution

Questions # 16:

Who are allowed to access highly confidential files?

Options:

Employees with a business need-to-know

Contractors with a business need-to-know

Employees with signed NDA have a business need-to-know

Non-employees designated with approved access and have signed NDA

Expert Solution

Questions # 17:

What is a repressive measure in case of a fire?

Options:

Taking out a fire insurance

Putting out a fire after it has been detected by a fire detector

Repairing damage caused by the fire

Expert Solution

Questions # 18:

Changes to the information processing facilities shall be done in controlled manner.

Options:

True

False

Expert Solution

Questions # 19:

What type of compliancy standard, regulation or legislation provides a code of practice for information security?

Options:

ISO/IEC 27002

Personal data protection act

Computer criminality act

IT Service Management

Expert Solution

Questions # 20:

Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Options:

Social engineering threat

Organisational threat

Technical threat

Malware threat

Expert Solution

Viewing page 2 out of 3 pages

Viewing questions 11-20 out of questions

Pass the GAQM GAQM: ISO ISO27-13-001 Questions and answers with CertsForce