Free GAQM ISO-27005-LRM Exam Questions

Become GAQM Certified with updated ISO-27005-LRM exam questions and correct answers

Page: 1 / 160

Total 796 Questions | Updated On: Oct 27, 2026

Add To Cart

Question 1

A hospital's electronic health record (EHR) system is infected with ransomware, encrypting patient records. What is the primary consequence of this ransomware attack in terms of the CIA triad?

A : Financial losses due to paying the ransom.

B : Loss of availability of patient records for healthcare providers.

C : Unauthorized disclosure of patient health information.

D : Permanent deletion of patient records, impacting data integrity.

Answer: B

Question 2

An online retailer is assessing the risk of a distributed denial of service (DDoS) attack during its major sale event. In ISO/IEC 27005 terms, what would 'consequence' refer to in this risk assessment?

A : The probability of a DDoS attack occurring during the sale event.

B : The technical methods used by attackers to initiate a DDoS attack.

C : The cost of implementing additional security measures to prevent DDoS attacks.

D : The impact on sales and customer trust if a DDoS attack occurs.

Answer: D

Question 3

A manufacturing company is at the risk treatment stage of its risk management process. What is an appropriate action at this stage?

A : Implementing risk treatment options to reduce identified risks to an acceptable level.

B : Transferring all risks to another company without evaluating the effectiveness of this approach.

C : Completely eliminating all risks without assessing their impact on the business.

D : Repeating the risk identification process without considering treatment options.

Answer: A

Question 4

An e-commerce company is establishing risk acceptance criteria. What is an important factor to consider when defining these criteria?

A : Copying risk acceptance criteria from a different industry without modification.

B : Defining criteria based on the company's risk appetite and the potential impact on its online business operations.

C : Setting criteria that accept all risks to expedite the decision-making process.

D : Basing criteria solely on the personal preferences of the risk manager.

Answer: B

Question 5

A government agency is implementing a risk management program. What factor should be emphasized in the risk management method to align with public sector requirements?

A : Emphasizing only the risks related to the agency's internal IT systems, ignoring external factors.

B : Focusing solely on risks that have a direct financial impact and ignoring other types of risks.

C : Adopting a method that is exclusively used in the private sector without any adaptation.

D : Prioritizing the protection of public data and continuity of government services in the risk management method.

Answer: D

Page: 1 / 160

Total 796 Questions | Updated On: Oct 27, 2026

Add To Cart