Question 1

Which one of the following options is the definition of the context of an organisation?

Options :

A :

The control of internal and external issues that can have an effect on an organisation-s desire to achieve its objectives

B :

Complexity of internal and external issues that can have an effect on an organisation-s approach to developing and achieving its purpose

C :

A combination of internal and external issues that can have an effect on an organisation-s approach to developing and achieving its objectives

D :

The coordination of internal and external issues that can have a positive or negative effect on an organisation-s success

Answer: C

Question 2

Which two of the following phrases are 'objectives' in relation to a first-party audit?

Options :

A : Apply international standards

B : Prepare the audit report for the certification body

C : Confirm the scope of the management system is accurate

D : Complete the audit on time

E : Apply Regulatory requirements

F : Update the management policy

Answer: C,F

Question 3

What is the standard definition of ISMS?

Options :

A : Is an information security systematic approach to achieve business objectives for implementation, establishing, reviewing,operating and maintaining organization-s reputation.

B : A company wide business objectives to achieve information security awareness for establishing, implementing, operating, monitoring, reviewing, maintaining and improving

C : A project-based approach to achieve business objectives for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization’s information security

D : A systematic approach for establishing, implementing, operating,monitoring, reviewing, maintaining and improving an organization’s information security to achieve business objectives.

Answer: D

Question 4

What is a definition of compliance?

Options :

A : Laws, considered collectively or the process of making or enacting laws

B : The state or fact of according with or meeting rules or standards

C : An official or authoritative instruction

D : A rule or directive made and maintained by an authority.

Answer: B

Question 5

In what part of the process to grant access to a system does the user present a token?

Options :

A : Authorisation

B : Verification

C : Authentication

D : Identification

Answer: D

Free ISO-IEC-27001-Lead-Auditor Mock Exam – Practice Online Confidently

Buying Options: