Online Access Free ISO-IEC-27001-Lead-Auditor Practice Test

Question
Which statement below best describes the relationship between information security elements?

• A.Risk is a function of vulnerabilities that harm assets
• B.Controls protect assets by reducing threats
• C.Threats exploit vulnerabilities to damage or destroy assets

Which one of the following statements best describes the purpose of conducting a document review?
* To reveal whether the documented management system is nonconforming with audit criteria and to gather evidence to support the audit report

• A.To detect any nonconformity of the management system, if documented, with audit criteria and to identify information to support the audit plan
• B.To decide about the conformity of the documented management system with audit standards and to gather findings to support the audit process
• C.To determine the conformity of the management system, as far as documented, with audit criteria and to gather information to support the on-site audit activities

Question:
Which controls are related to the Annex A controls of ISO/IEC 27001 and are often selected from other guides and standards or defined by the organization to meet its specific needs?

• A.Specific controls
• B.Strategic controls
• C.General controls

Question:
What is the purpose of using a combination of audit test plans?

• A.To ensure that all areas of the organization are audited equally
• B.To reduce the need for frequent audits
• C.To verify compliance with standards and criteria through multiple methods

Question
During a certification audit at Company X, the audit team leader noticed that some HR processes are excluded from the audit scope. However, these processes are included in the company's ISMS scope.
Is this acceptable?

• A.No, all processes listed in the ISMS scope must be audited.
• B.Yes, only IT-related processes must be included in the audit scope.
• C.Yes, the audit scope can be narrower than the ISMS scope, provided it aligns with the audit program and objectives.