Free PECB ISO-IEC-27001-Lead-Auditor Exam Questions

Become PECB Certified with updated ISO-IEC-27001-Lead-Auditor exam questions and correct answers

Page: 1 / 71

Total 353 Questions | Updated On: Jan 18, 2022

Add To Cart

Question 1

You are an experienced audit team leader guiding an auditor in training.

Your team is currently conducting a third-party surveillance audit of an organisation that stores data on behalf

of external clients. The auditor in training has been tasked with reviewing the PEOPLE controls listed in the

Statement of Applicability (SoA) and mplemented at the site.

Select four controls from the following that would you expect the auditor in training to review.

A : Confidentiality and nondisclosure agreements

B : How protection against malware is implemented

C : Information security awareness, education and training

D : Remote working arrangements

E : The conducting of verification checks on personnel

F : The operation of the site CCTV and door control systems

G : The organisation's arrangements for information deletion

H : The organisation's business continuity arrangements

Answer: A,C,D,E

Question 2

Stages of Information

A : creation, evolution, maintenance, use, disposition

B : creation, use, disposition, maintenance, evolution

C : creation, distribution, use, maintenance, disposition

D : creation, distribution, maintenance, disposition, use

Answer: C

Question 3

The auditor should consider (1)-------when determining the (2)--------

A : (1) Standard requirements. (2) audit criteria

B : (1) Audit risks, (2) audit objectives

C : (1) Penalties related to legal noncompliance, (2) materiality

Answer: B

Question 4

Which two of the following phrases would apply to "act" in relation to the Plan-Do-Check-Act cycle for a business process?

A : Auditing processes

B : Planning changes

C : Measuring objectives

D : Resetting objectives

E : Achieving improvements

F : Verifying training

Answer: D,E

Question 5

Which option below about the ISMS scope is correct?

A : ISMS scope should be available as documented information

B : ISMS scope should ensure continual improvement

C : ISMS scope should be compatible with the strategic orientation of the organization

Answer: A

Page: 1 / 71

Total 353 Questions | Updated On: Jan 18, 2022

Add To Cart