GAQM ISO-IEC-LI Quiz 1 Topic 6 Questions 1-5

Question: 1

A company moves into a new building. A few weeks after the move, a visitor appears unannounced in the office of the director. An investigation shows that visitors passes grant the same access as the passes of the company's staff. Which kind of security measure could have prevented this?

Aphysical security measure

BAn organizational security measure

CA technical security measure

Show Answer

Question: 2

Select risk control activities for domain "10. Encryption" of ISO / 27002: 2013 (Choose two)

AWork in safe areas

BCryptographic Controls Use Policy

CPhysical security perimeter

DKey management

Show Answer

Question: 3

What is the greatest risk for an organization if no information security policy has been defined?

AIf everyone works with the same account, it is impossible to find out who worked on what.

BInformation security activities are carried out by only a few people.

CToo many measures are implemented.

DIt is not possible for an organization to implement information security in a consistent manner.

Show Answer

Question: 4

What do employees need to know to report a security incident?

AHow to report an incident and to whom.

BWhether the incident has occurred before and what was the resulting damage.

CThe measures that should have been taken to prevent the incident in the first place.

DWho is responsible for the incident and whether it was intentional.

Show Answer

Question: 5

Why is compliance important for the reliability of the information?

ACompliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

BBy meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

CWhen an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

DWhen an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

Show Answer

GAQM ISO-IEC-LI Quiz:1 Topic:6 Questions:1-5