ISO-ISMS-LA ISO 27001:2013 ISMS - Certified Lead Auditor Questions and Answers

Accuracy and completeness of the data

Data should be viewable at all times

Data should be accessed by only the right people

An information security policy makes the security plan concrete by providing the necessary details

An information security policy provides insight into threats and the possible consequences

An information security policy provides direction and support to the management regarding information security

An information security policy documents the analysis of risks and the search for countermeasures 

Forced roll off from the project

The lowest rating on his or her performance assessment

Three days suspension from work

Termination

dependency

threat

vulnerability 

risk 

The author of the document 

The administrator of the document 

The owner of the document

The manager of the owner of the document  

To provide clear identification tags

To structure the information according to its sensitivity 

Creating a manual describing the BYOD policy

Employees with a business need-to-know

Contractors with a business need-to-know

Employees with signed NDA have a business need-to-know

Non-employees designated with approved access and have signed NDA

Don't use the same password for various company system security access

Do not share passwords with anyone

For easy recall, use the same password for company and personal accounts

Change a temporary password on first log-on

a loose cable

accidental alteration of data

private use of data 

System restart

True

False

Confidentiality cannot be guaranteed

Integrity cannot be guaranteed

Authenticity cannot be guaranteed

Availability cannot be guaranteed

Ignore the email

Respond it by saying that one should not share the password with anyone

One should not respond to these mails and report such email to your supervisor