PECB Certified ISO/IEC 27001 Lead Implementer Practice Test

PECB Certified ISO/IEC 27001 Lead Implementer Practice Test practice questions, page 3 of 12, with answer review and explanations.

Question 11

FinanceX, a well-known financial institution, uses an online banking platform that enables clients to easily and securely access their bank accounts. To log in, clients are required to enter the one-time authorization code sent to their smartphone. What can be concluded from this scenario?

  1. FinanceX has implemented a security control that ensures the confidentiality of information
  2. FinanceX has implemented an integrity control that avoids the involuntary corruption of data
  3. FinanceX has incorrectly implemented a security control that could become a vulnerability

Question 12

An employee of the organization accidentally deleted customers’ data stored in the database. What is the impact of this action?

  1. Information is not accessible when required
  2. Information is modified in transit
  3. Information is not available to only authorized users

Question 13

Which of the following statements regarding information security risk is NOT correct?

  1. Information security risk is associated with the potential that the vulnerabilities of an information asset may be exploited by threats
  2. Information security risk cannot be accepted without being treated or during the process of risk treatment
  3. Information security risk can be expressed as the effect of uncertainty on information security objectives

Question 14

The IT Department of a financial institution decided to implement preventive controls to avoid potential security breaches. Therefore, they separated the development, testing, and operating equipment, secured their offices, and used cryptographic keys. However, they are seeking further measures to enhance their security and minimize the risk of security breaches. Which of the following controls would help the IT Department achieve this objective?

  1. Alarms to detect risks related to heat, smoke, fire, or water
  2. Change all passwords of all systems
  3. An access control software to restrict access to sensitive files

Question 15

Diana works as a customer service representative for a large e-commerce company. One day, she accidently modified the order details of a customer without their permission. Due to this error, the customer received an incorrect product. Which information security principle was breached in this case?

  1. Availability
  2. Confidentiality
  3. Integrity