Question 1

FinanceX, a well-known financial institution, uses an online banking platform that enables clients to easily and securely access their bank accounts. To log in, clients are required to enter the one-lime authorization code sent to their smartphone. What can be concluded from this scenario?

Options :

A : FinanceX has implemented a securityControl that ensures the confidentiality of information

B : FinanceX has implemented an integrity control that avoids the involuntary corruption of data

C : FinanceX has incorrectly implemented a security control that could become a vulnerability

Answer: A

Question 2

Which of the following statements is accurate regarding the methodology for managing the implementation of an ISMS?

Options :

A : Organizations must strictly follow a specific methodology to meet the minimum requirements

B : The sequence of steps must remain fixed throughout the ISMS implementation

C : Organizations can adapt the methodology to their specific context, and steps can be modified as needed

Answer: C

Question 3

What risk treatment option has Company A implemented if it has required from its employees the change of email passwords at least once every 60 days?

Options :

A : Risk modification

B : Risk avoidance

C : Risk retention

Answer: A

Question 4

Responsibilities for information security in projects should be defined and allocated to:

Options :

A : the project manager

B : specified roles defined in the used project management method of the organization

C : the InfoSec officer

D : the owner of the involved asset

Answer: B

Question 5

Which of the following statements regarding information security risk is NOT correct?

Options :

A : Information security risk is associated with the potential that the vulnerabilities of an information asset may be exploited by threats

B : Information security risk cannot be accepted without being treated or during the process of risk treatment

C : Information security risk can be expressed as the effect of uncertainty on information security objectives

Answer: B

Free ISO-IEC-27001-Lead-Implementer Mock Exam – Practice Online Confidently

Buying Options: