Pass ISO-IEC-LI Exam in First Attempt Guaranteed 2021 Dumps!
ISO-IEC-LI Dumps Full Questions - Exam Study Guide
NEW QUESTION 29
Physical labels and ________ are two common forms of labeling which are mentioned in ISO 27002.
- A. metadata
- B. bridge
- C. teradata
Answer: A
NEW QUESTION 30
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?
- A. The person who drafted the insurance terms and conditions
- B. The manager, Linda
- C. The recipient, Rachel
- D. The sender, Peter
Answer: C
NEW QUESTION 31
True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered
- A. True
- B. False
Answer: A
NEW QUESTION 32
Which of these reliability aspects is "completeness" a part of?
- A. Availability
- B. Integrity
- C. Exclusivity
- D. Confidentiality
Answer: B
NEW QUESTION 33
How many domains does ISO / IEC 27002: 2013 have?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 34
Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?
- A. Everyone can easily see how sensitive the reports' contents are by consulting the grading label.
- B. A determination can be made as to which report should be printed first and which ones can wait a little longer.
- C. The costs for automating are easier to charge to the responsible departments.
- D. Reports can be developed more easily and with fewer errors.
Answer: A
NEW QUESTION 35
What is the ISO / IEC 27002 standard?
- A. It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001
- B. It is a guide of good practices that describes the control objectives and recommended controls regarding information security.
- C. It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.
Answer: B
NEW QUESTION 36
One of the ways Internet of Things (IoT) devices can communicate with each other (or 'the outside world') is using a so-called short-range radio protocol. Which kind of short-range radio protocol makes it possible to use your phone as a credit card?
- A. Radio Frequency Identification (RFID)
- B. The 4G protocol
- C. Bluetooth
- D. Near Field Communication (NFC)
Answer: D
NEW QUESTION 37
What sort of security does a Public Key Infrastructure (PKI) offer?
- A. By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.
- B. A PKI ensures that backups of company data are made on a regular basis.
- C. It provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.
- D. Having a PKI shows customers that a web-based business is secure.
Answer: B
NEW QUESTION 38
What are the data protection principles set out in the GDPR?
- A. Purpose limitation, proportionality, availability, data minimisation
- B. Target group, proportionality, transparency, data minimisation
- C. Purpose limitation, proportionality, data minimisation, transparency
- D. Purpose limitation, pudicity, transparency, data minimisation
Answer: C
NEW QUESTION 39
What should be used to protect data on removable media if data confidentiality or integrity are important considerations?
- A. backup on another removable medium
- B. logging
- C. cryptographic techniques
- D. a password
Answer: C
NEW QUESTION 40
What is an example of a non-human threat to the physical environment?
- A. Storm
- B. Corrupted file
- C. Fraudulent transaction
- D. Virus
Answer: A
NEW QUESTION 41
Who is authorized to change the classification of a document?
- A. The owner of the document
- B. The manager of the owner of the document
- C. The administrator of the document
- D. The author of the document
Answer: A
NEW QUESTION 42
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?
- A. If the risk analysis has not been carried out.
- B. When the organization is located near a river.
- C. When the computer systems are not insured.
- D. When computer systems are kept in a cellar below ground level.
Answer: D
NEW QUESTION 43
Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process: identification?
- A. The first step consists of granting access to the information to which the user is authorized.
- B. The first step consists of checking if the user appears on the list of authorized users.
- C. The first step consists of comparing the password with the registered password.
- D. The first step consists of checking if the user is using the correct certificate.
Answer: B
NEW QUESTION 44
A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the company's staff. Which kind of security measure could have prevented this?
- A. A technical security measure
- B. physical security measure
- C. An organizational security measure
Answer: B
NEW QUESTION 45
What is the most important reason for applying the segregation of duties?
- A. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.
- B. Segregation of duties makes it clear who is responsible for what.
- C. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
- D. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
Answer: C
NEW QUESTION 46
What is the greatest risk for an organization if no information security policy has been defined?
- A. It is not possible for an organization to implement information security in a consistent manner.
- B. Information security activities are carried out by only a few people.
- C. Too many measures are implemented.
- D. If everyone works with the same account, it is impossible to find out who worked on what.
Answer: A
NEW QUESTION 47
ISO 27002 provides guidance in the following area
- A. Detailed lists of required policies and procedures
- B. Information handling recommendations
- C. PCI environment scoping
- D. Framework for an overall security and compliance program
Answer: D
NEW QUESTION 48
What is an example of a good physical security measure?
- A. Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.
- B. All employees and visitors carry an access pass.
- C. Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.
Answer: B
NEW QUESTION 49
......
GAQM certification Free Certification Exam Material from Pass4SureQuiz with 50 Questions: https://www.pass4surequiz.com/ISO-IEC-LI-exam-quiz.html