Summer Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Online ISO-IEC-27001-Lead-Implementer Questions Video

PECB Certified ISO/IEC 27001 : 2022 Lead Implementer exam Questions and Answers

Question 37

Upon the risk assessment outcomes. Socket Inc. decided to:

• Require the use of passwords with at least 12 characters containing uppercase and lowercase letters, symbols, and numbers

• Require the change of passwords at least once every 60 days

• Keep backup copies of files on IT-provided network drives

• Assign users to a separate network when they have access to cloud storage files storing customers' personal data.

What is the most important asset to Socket Inc. associated with the use of cloud storage? Refer to scenario 5.

Options:

A.

IT provided network drives

B.

Employees with access to cloud storage files

C.

Customers' personal data

Question 38

Which of the following is the information security committee responsible for?

Options:

A.

Ensure smooth running of the ISMS

B.

Set annual objectives and the ISMS strategy

C.

Treat the nonconformities

Question 39

Scenario 7: Incident Response at Texas H&H Inc.

Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed tor threat detection, including the detection of malicious files which could be the cause of possible future attacks.

Based on these findings. Texas H$H inc, decided to modify its access security system to avoid future incidents and integrate an incident management policy in their Information security policy that could serve as guidance for employees on how to respond to similar incidents.

Based on the scenario above, answer the following question:

Texas H&H Inc. decided to assign an internal expert for their forensic analysis. Is this acceptable? Refer lo scenario 7.

Options:

A.

Yes. forensic analysis can be done by cither an internal or external expert

B.

Yes. hiring an external expert for forensic analysis Is a requirement of the standard

C.

No. the company's forensic analysis should be based on the conclusion of Its cloud storage provide investigation

Question 40

Scenario 1: HealthGenic is a pediatric clinic that monitors the health and growth of individuals from infancy to early adulthood using a web-based medical software. The software is also used to schedule appointments, create customized medical reports, store patients' data and medical history, and communicate with all the [^involved parties, including parents, other physicians, and the medical laboratory staff.

Last month, HealthGenic experienced a number of service interruptions due to the increased number of users accessing the software Another issue the company faced while using the software was the complicated user interface, which the untrained personnel found challenging to use.

The top management of HealthGenic immediately informed the company that had developed the software about the issue. The software company fixed the issue; however, in the process of doing so, it modified some files that comprised sensitive information related to HealthGenic's patients. The modifications that were made resulted in incomplete and incorrect medical reports and, more importantly, invaded the patients' privacy.

Based on the scenario above, answer the following question:

According to scenario 1. to detect (1)____________________________, Antiques should have implemented (2)

Options:

A.

(1) Patches. (2) an access control software

B.

(1) Intrusions on networks. (?) an intrusion detection system

C.

(1) Technical vulnerabilities. (2) network intrusions