Question 1

Why do we need to test a disaster recovery plan regularly, and keep it up to date?

Options :

A : Otherwise the measures taken and the incident procedures planned may not be adequate

B : Otherwise it is no longer up to date with the registration of daily occurring faults

C : Otherwise remotely stored backups may no longer be available to the security team

Answer: A

Question 2

You are performing an ISMS audit at a residential nursing home that provides healthcare services and are

reviewing the Software Code Management (SCM) system. You found a total of 10 user accounts on the SCM.

You confirm that one of the users, Scott, resigned 9-months

ago. The SCM System Administrator confirmed Scott's last check-out of the source code was found 1 month

ago. He was using one of the uthorized desktops from the local network in a secure area.

You check with the user de-registration procedure which states "Managers have to make sure of deregistration

of the user account and authorisation immediately from the relevant ICT system and/or equipment after

resignation approval." There was no deregistration record for user Scott.

The IT Security Manager explains that Scott still comes back to the office every month after he resigned to

provide support on source code maintenance. That's why his account on SCM still exists.

You would like to investigate other areas further to collect more audit evidence. Select three options that

would not be valid audit trails.

Options :

A :

Collect more evidence on how access controls are periodically reviewed to maintain security (Relevant to control A.5.35)

B :

Collect more evidence on how the transition of Scott from full-time to part-time employment was managed (relevant to control A.6.5)

C :

Collect more evidence from Scott-s background verification checks performed by the human resource department under the new employment relationship. (Relevant to control A.6.1)

D :

Collect more evidence of why Scott resigned and whether his re-engagement represents a conflict of interest. (relevant to control A.5.3)

E :

Collect more evidence on how Scott can access the employee-s desktop and local network. (Relevant to control A.5.15)

F : Collect more evidence on how Scott can access the secure area. (Relevant to control A.8.4)

G :

Collect more evidence on how the organization pays for Scott-s source code maintenance support service. (Relevant to control A.6.2)

H :

Collect more evidence on where Scott kept the source code that he checked out and how it was secured. (Relevant to control A.8.4)

Answer: B,D,G

Question 3

Which one of the following options is the definition of the context of an organisation?

Options :

A :

The control of internal and external issues that can have an effect on an organisation-s desire to achieve its objectives

B :

Complexity of internal and external issues that can have an effect on an organisation-s approach to developing and achieving its purpose

C :

A combination of internal and external issues that can have an effect on an organisation-s approach to developing and achieving its objectives

D :

The coordination of internal and external issues that can have a positive or negative effect on an organisation-s success

Answer: C

Question 4

In acceptable use of Information Assets, which is the best practice?

Options :

A : Access to information and communication systems are provided for business purpose only

B : Interfering with or denying service to any user other than the employee-s host

C : Playing any computer games during office hours

D : Accessing phone or network transmissions, including wireless or wifi transmissions

Answer: A

Question 5

You see a blue color sticker on certain physical assets. What does this signify?

Options :

A : The asset is very high critical and its failure affects the entire organization

B : The asset with blue stickers should be kept air conditioned at all times

C : The asset is high critical and its failure will affect a group/s/project-s work in the organization

D : The asset is critical and the impact is restricted to an employee only

Answer: C

Free ISO-IEC-27001-Lead-Auditor Mock Exam – Practice Online Confidently

Buying Options: