PECB Certified ISO/IEC 27001 Lead Implementer Practice Test

PECB Certified ISO/IEC 27001 Lead Implementer Practice Test practice questions, page 8 of 12, with answer review and explanations.

Question 36

Based on scenario 5, which committee should Operaze create to ensure the smooth running of the ISMS?

  1. Information security committee
  2. Management committee
  3. Operational committee

Question 37

What is the next step that Operaze’s ISMS implementation team should take after drafting the information security policy? Refer to scenario 5.

  1. Implement the information security policy
  2. Obtain top management's approval for the information security policy
  3. Communicate the information security policy to all employees

Question 38

An organization has adopted a new authentication method to ensure secure access to sensitive areas and facilities of the company. It requires every employee to use a two-factor authentication (password and QR code). This control has been documented, standardized, and communicated to all employees, however its use has been left to individual initiative, and it is likely that failures can be detected. Which level of maturity does this control refer to?

  1. Optimized
  2. Defined
  3. Quantitatively managed

Question 39

Which tool is used to identify, analyze, and manage interested parties?

  1. The probability/impact matrix
  2. The power/interest matrix
  3. The likelihood/severity matrix

Question 40

“The ISMS covers all departments within Company XYZ that have access to customers’ data. The purpose of the ISMS is to ensure the confidentiality, integrity, and availability of customers’ data, and ensure compliance with the applicable regulatory requirements regarding information security.” What does this statement describe?

  1. The information systems boundary of the ISMS scope
  2. The organizational boundaries of the ISMS scope
  3. The physical boundary of the ISMS scope