Updated PDF (New 2022) Actual GAQM ISO-ISMS-LA Exam Questions [Q58-Q76]

ISO-ISMS-LA GAQM

Posted byadminMay 4, 2022Leave a Comment on Updated PDF (New 2022) Actual GAQM ISO-ISMS-LA Exam Questions [Q58-Q76]

4/5 - (1 vote)

Updated PDF (New 2022) Actual GAQM ISO-ISMS-LA Exam Questions

Verified ISO-ISMS-LA Exam Dumps PDF [2022] Access using ExamsTorrent

NO.58 CMM stands for?

Capability Maturity Matrix

Capacity Maturity Matrix

Capability Maturity Model

Capable Mature Model

NO.59 What type of legislation requires a proper controlled purchase process?

Personal data protection act

Computer criminality act

Government information act

Intellectual property rights act

NO.60 A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company’s information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

NO.61 What is we do in ACT – From PDCA cycle

Take actions to continually monitor process performance

Take actions to continually improve process performance

Take actions to continually monitor process performance

Take actions to continually improve people performance

NO.62 What is the goal of classification of information?

To create a manual about how to handle mobile devices

Applying labels making the information easier to recognize

Structuring information according to its sensitivity

NO.63 Who is authorized to change the classification of a document?

The author of the document

The administrator of the document

The owner of the document

The manager of the owner of the document

NO.64 Who are allowed to access highly confidential files?

Employees with a business need-to-know

Contractors with a business need-to-know

Employees with signed NDA have a business need-to-know

Non-employees designated with approved access and have signed NDA

NO.65 After a fire has occurred, what repressive measure can be taken?

Extinguishing the fire after the fire alarm sounds

Buying in a proper fire insurance policy

Repairing all systems after the fire

NO.66 What is the name of the system that guarantees the coherence of information security in the organization?

Information Security Management System (ISMS)

Rootkit

Security regulations for special information for the government

Information Technology Service Management (ITSM)

NO.67 Information has a number of reliability aspects. Reliability is constantly being threatened. Examples of threats are: a cable becomes loose, someone alters information by accident, data is used privately or is falsified.
Which of these examples is a threat to integrity?

a loose cable

accidental alteration of data

private use of data

System restart

NO.68 Which measure is a preventive measure?

Installing a logging system that enables changes in a system to be recognized

Shutting down all internet traffic after a hacker has gained access to the company systems

Putting sensitive information in a safe

NO.69 Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

Unauthorised persons will have access to both the servers and backups

Responsibility for the backups is not defined well

After a fire, the information systems cannot be restored

After a server crash, it will take extra time to bring it back up again

NO.70 An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.

True

False

NO.71 As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Appoint security staff

Encrypt all sensitive information

Formulate a policy

Set up an access control procedure

NO.72 What is a reason for the classification of information?

To provide clear identification tags

To structure the information according to its sensitivity

Creating a manual describing the BYOD policy

NO.73 Which is not a requirement of HR prior to hiring?

Undergo background verification

Applicant must complete pre-employment documentation requirements

Must undergo Awareness training on information security.

Must successfully pass Background Investigation

NO.74 The following are purposes of Information Security, except:

Ensure Business Continuity

Minimize Business Risk

Increase Business Assets

Maximize Return on Investment

NO.75 An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

True

False

NO.76 Information or data that are classified as ______ do not require labeling.

Public

Internal

Confidential

Highly Confidential

Loading …