참고: Itcertkr에서 Google Drive로 공유하는 무료, 최신 ISO-IEC-27001-Lead-Auditor 시험 문제집이 있습니다: https://drive.google.com/open?id=1FBlnku4wTObmXE_ZeRoyehTp4FUPsNOX
우리Itcertkr 사이트에PECB ISO-IEC-27001-Lead-Auditor관련자료의 일부 문제와 답 등 문제들을 제공함으로 여러분은 무료로 다운받아 체험해보실 수 있습니다. 여러분은 이것이야 말로 알맞춤이고, 전면적인 여러분이 지금까지 갖고 싶었던 문제집이라는 것을 느끼게 됩니다.
| Certification Vendor: | PECB |
|---|---|
| Exam Name: | PECB Certified ISO/IEC 27001 Lead Auditor |
| Exam Number: | ISO-IEC-27001-Lead-Auditor |
| Passing Score: | 70% |
| Certificate Validity Period: | 3 years (with maintenance requirement) |
| Related Certifications: | PECB ISO/IEC 27001 Lead Implementer PECB ISO/IEC 27001 Foundation |
| Exam Duration: | 180 minutes |
| Available Languages: | English, French, Spanish, Portuguese, German |
| Exam Price: | USD 500 |
| Exam Format: | Essay-type questions, Multiple choice |
| Real Exam Qty: | 80 |
| Sample Questions: | PECB ISO-IEC-27001-Lead-Auditor Sample Questions |
| Exam Way: | Online proctored exam or at authorized testing centers worldwide |
| Pre Condition: | Candidates should have a foundational understanding of ISO/IEC 27001 and audit principles. It is recommended (but not mandatory) to have completed the PECB ISO/IEC 27001 Lead Implementer training or equivalent experience. |
| Official Syllabus URL: | https://pecb.com/en/education/iso-iec-27001-lead-auditor |
>> ISO-IEC-27001-Lead-Auditor유효한 공부자료 <<
IT전문가들이 자신만의 경험과 끊임없는 노력으로 작성한 PECB ISO-IEC-27001-Lead-Auditor덤프에 관심이 있는데 선뜻 구매결정을 내릴수없는 분은PECB ISO-IEC-27001-Lead-Auditor덤프 구매 사이트에서 메일주소를 입력한후 DEMO를 다운받아 문제를 풀어보고 구매할수 있습니다. 자격증을 많이 취득하면 좁은 취업문도 넓어집니다. PECB ISO-IEC-27001-Lead-Auditor 덤프로PECB ISO-IEC-27001-Lead-Auditor시험을 패스하여 자격즉을 쉽게 취득해보지 않으실래요?
PECB ISO-AIC-27001-Lead-Auditor Certification Exam은 정보 보안 시스템의 감사 및 관리에 중점을 둔 국제적으로 인정 된 시험입니다. 이 인증은 ISO/IEC 27001 표준에 대해 조직의 정보 보안 관리 시스템 (ISMS)을 감사하고 평가하는 데 관심이있는 전문가를위한 것입니다.
질문 # 285
Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.
정답：A
질문 # 286
Scenario 3: NightCore is a multinational technology company based in the United States that focuses on e-commerce, cloud computing, digital streaming, and artificial intelligence. After having an information security management system (ISMS) implemented for over 8 months, they contracted a certification body to conduct a third party audit in order to get certified against ISO/IEC 27001.
The certification body set up a team of seven auditors. Jack, the most experienced auditor, was assigned as the audit team leader. Over the years, he received many well known certifications, such as the ISO/IEC 27001 Lead Auditor, CISA, CISSP, and CISM.
Jack conducted thorough analyses on each phase of the ISMS audit, by studying and evaluating every information security requirement and control that was implemented by NightCore. During stage 2 audit. Jack detected several nonconformities. After comparing the number of purchased invoices for software licenses with the software inventory, Jack found out that the company has been using the illegal versions of a software for many computers. He decided to ask for an explanation from the top management about this nonconformity and see whether they were aware about this. His next step was to audit NightCore's IT Department. The top management assigned Tom, NightCore's system administrator, to act as a guide and accompany Jack and the audit team toward the inner workings of their system and their digital assets infrastructure.
While interviewing a member of the Department of Finance, the auditors discovered that the company had recently made some unusual large transactions to one of their consultants. After gathering all the necessary details regarding the transactions. Jack decided to directly interview the top management.
When discussing about the first nonconformity, the top management told Jack that they willingly decided to use a copied software over the original one since it was cheaper. Jack explained to the top management of NightCore that using illegal versions of software is against the requirements of ISO/IEC 27001 and the national laws and regulations. However, they seemed to be fine with it.
Several months after the audit, Jack sold some of NightCore's information that he collected during the audit for a huge amount of money to competitors of NightCore.
Based on this scenario, answer the following question:
Based on scenario 3. which ISO/IEC 27001 control has NightCore ignored when they used an illegal version of software?
정답：C
설명：
By using illegal versions of software, NightCore ignored the control about intellectual property rights under Annex A.8.1.1 of ISO/IEC 27001, which requires the protection of organizational records to include intellectual property and personal information held in the form of data or software.
질문 # 287
Which one of the following options describes the main purpose of a Stage 1 audit?
정답：B
설명：
Explanation
The main purpose of a Stage 1 audit is to evaluate the adequacy and effectiveness of the organisation's ISMS documentation, and to assess whether the organisation is prepared for the Stage 2 audit, where the implementation and operation of the ISMS will be verified. The Stage 1 audit also involves verifying the scope, objectives, and context of the ISMS, as well as identifying any areas of concern or nonconformities that need to be addressed before the Stage 2 audit.
References:
ISO/IEC 27001:2022 Lead Auditor (Information Security Management Systems) objectives and content from Quality.org and PECB ISO/IEC 27006:2015 Information technology - Security techniques - Requirements for bodies providing audit and certification of information security management systems Section 7.3.1
질문 # 288
Which of the following does a lack of adequate security controls represent?
정답：A
설명：
A lack of adequate security controls represents a vulnerability, which is a weakness or flaw in an asset or its protection that can be exploited by a threat. A vulnerability can increase the likelihood or impact of a security incident, and therefore should be identified and treated as part of the risk management process. ISO/IEC 27001:2022 defines vulnerability as "the absence or weakness of a safeguard that could be exploited by a threat source" (see clause 3.49). Reference: [CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course], ISO/IEC 27001:2022 Information technology - Security techniques - Information security management systems - Requirements
질문 # 289
Please match the following situations to the type of audit required.
정답：
설명：
Explanation:
* Top management requests auditors from the organisation's compliance department to audit the production process in order to ensure the final product meets quality requirements = First-party audit
* Auditors from the buyer's organisation audit their raw material supplier to ensure the supply fulfils the order and contract = Second-party audit
* Auditors from an independent certification body conduct an audit of the organisation to verify conformity with an ISO Standard for certification purposes = Third-party audit
* The organisation has been audited against two management system standards in one audit = Combined audit Explanation: According to the ISO/IEC 27001 standard, there are three main categories of audits: internal, external, and certification1. An internal audit, also known as a first-party audit, is an audit conducted by the organisation itself, or by an external party on its behalf, for management review and other internal purposes12. An external audit, also known as a second-party audit, is an audit conducted by a customer or other interested party on a supplier or contractor to verify compliance with contractual or other requirements12. A certification audit, also known as a third-party audit, is an audit conducted by an independent certification body to verify conformity with an ISO standard for certification purposes12. A combined audit is an audit where two or more management system standards are audited together3.
References: 1: PECB Candidate Handbook - ISO/IEC 27001 Lead Auditor, page 192: ISO 27001 Audit Types and How They are Conducted23: The Four ISO 27001 Audit Categories, Explained4
질문 # 290
......
ISO-IEC-27001-Lead-Auditor최고품질 예상문제모음: https://www.itcertkr.com/ISO-IEC-27001-Lead-Auditor_exam.html
참고: Itcertkr에서 Google Drive로 공유하는 무료, 최신 ISO-IEC-27001-Lead-Auditor 시험 문제집이 있습니다: https://drive.google.com/open?id=1FBlnku4wTObmXE_ZeRoyehTp4FUPsNOX