Unique Top-selling ISO-ISMS-LA Exams - New 2021 GAQM Pratice Exam
GAQM: ISO Dumps ISO-ISMS-LA Exam for Full Questions - Exam Study Guide
NEW QUESTION 27
What type of compliancy standard, regulation or legislation provides a code of practice for information security?
- A. ISO/IEC 27002
- B. Computer criminality act
- C. Personal data protection act
- D. IT Service Management
Answer: A
NEW QUESTION 28
A fire breaks out in a branch office of a health insurance company. The personnel are transferred to neighboring branches to continue their work.
Where in the incident cycle is moving to a stand-by arrangements found?
- A. between incident and damage
- B. between threat and incident
- C. between damage and recovery
- D. between recovery and threat
Answer: A
NEW QUESTION 29
Which of the following is an information security management system standard published by the International Organization for Standardization?
- A. ISO27001
- B. ISO22301
- C. ISO5501
- D. ISO9008
Answer: A
NEW QUESTION 30
Which of the following does a lack of adequate security controls represent?
- A. Asset
- B. Threat
- C. Impact
- D. Vulnerability
Answer: D
NEW QUESTION 31
You receive the following mail from the IT support team: Dear User,Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below details in order to continue using your account. In case of no response, Name:
Email ID:
Password:
DOB:
Kindly contact the webmail team for any further support. Thanks for your attention.
Which of the following is the best response?
- A. Ignore the email
- B. Respond it by saying that one should not share the password with anyone
- C. One should not respond to these mails and report such email to your supervisor
Answer: C
NEW QUESTION 32
Implement plan on a test basis - this comes under which section of PDCA
- A. Plan
- B. Do
- C. Check
- D. Act
Answer: B
NEW QUESTION 33
You have a hard copy of a customer design document that you want to dispose off. What would you do
- A. Give it to the office boy to reuse it for other purposes
- B. Throw it in any dustbin
- C. Shred it using a shredder
- D. Be environment friendly and reuse it for writing
Answer: C
NEW QUESTION 34
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?
- A. Organizational threat
- B. Social Engineering
- C. Arason
- D. Natural threat
Answer: B
NEW QUESTION 35
Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?
- A. Responsibility for the backups is not defined well
- B. After a server crash, it will take extra time to bring it back up again
- C. Unauthorised persons will have access to both the servers and backups
- D. After a fire, the information systems cannot be restored
Answer: D
NEW QUESTION 36
Information or data that are classified as ______ do not require labeling.
- A. Highly Confidential
- B. Confidential
- C. Public
- D. Internal
Answer: C
NEW QUESTION 37
The following are purposes of Information Security, except:
- A. Maximize Return on Investment
- B. Increase Business Assets
- C. Ensure Business Continuity
- D. Minimize Business Risk
Answer: B
NEW QUESTION 38
What is the difference between a restricted and confidential document?
- A. Restricted - to be shared among named individuals
Confidential - to be shared among an authorized group - B. Restricted - to be shared among named individuals
Confidential - to be shared with friends and family - C. Restricted - to be shared among named individuals
Confidential - to be shared across the organization only - D. Restricted - to be shared among an authorized group
Confidential - to be shared among named individuals
Answer: A
NEW QUESTION 39
Below is Purpose of "Integrity", which is one of the Basic Components of Information Security
- A. the property that information is not made available or disclosed to unauthorized individuals
- B. the property of safeguarding the accuracy and completeness of assets.
- C. the property of being accessible and usable upon demand by an authorized entity.
- D. the property that information is not made available or disclosed to unauthorized individuals
Answer: B
NEW QUESTION 40
Who is responsible for Initial asset allocation to the user/custodian of the assets?
- A. Asset Manager
- B. Asset Stakeholder
- C. Asset Practitioner
- D. Asset Owner
Answer: D
NEW QUESTION 41
In acceptable use of Information Assets, which is the best practice?
- A. Accessing phone or network transmissions, including wireless or wifi transmissions
- B. Playing any computer games during office hours
- C. Access to information and communication systems are provided for business purpose only
- D. Interfering with or denying service to any user other than the employee's host
Answer: C
NEW QUESTION 42
Which of the following is a preventive security measure?
- A. Storing sensitive information in a data save
- B. Installing logging and monitoring software
- C. Shutting down the Internet connection after an attack
Answer: A
NEW QUESTION 43
......
Best way to practice test for GAQM ISO-ISMS-LA: https://www.actualtorrent.com/ISO-ISMS-LA-questions-answers.html