최신GAQM ISO 27001 : 2013 ISMS - Certified Lead Auditor - ISO-ISMS-LA무료샘플문제
문제1
Phishing is what type of Information Security Incident?
Phishing is what type of Information Security Incident?
정답: C
문제2
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.
정답: A
문제3
What is the security management term for establishing whether someone's identity is correct?
What is the security management term for establishing whether someone's identity is correct?
정답: B
문제4
Does the security have the right to ask you to display your ID badges and check your bags?
Does the security have the right to ask you to display your ID badges and check your bags?
정답: B
문제5
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?
A hacker gains access to a webserver and can view a file on the server containing credit card numbers.
Which of the Confidentiality, Integrity, Availability (CIA) principles of the credit card file are violated?
정답: A
문제6
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
정답: B
문제7
Which of the following does a lack of adequate security controls represent?
Which of the following does a lack of adequate security controls represent?
정답: C
문제8
Who is responsible for Initial asset allocation to the user/custodian of the assets?
Who is responsible for Initial asset allocation to the user/custodian of the assets?
정답: D
문제9
Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.
Which department maintain's contacts with law enforcement authorities, regulatory bodies, information service providers and telecommunications service providers depending on the service required.
정답: D
문제10
The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?
The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?
정답: D