Free Access PECB.ISO-IEC-27001-Lead-Implementer.v2022-01-25.q17 Practice Test (Page 3)

Question 6

You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

A.Risk avoiding

B.Risk neutral

C.Risk passing

D.Risk bearing

Question 7

Why is compliance important forthe reliability of the information?

A.When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

B.Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

C.By meeting the legislative requirements and theregulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

D.When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and thereforeit guarantees the reliability of its information.

Question 8

What are the data protection principles set out in the GDPR?

A.Purpose limitation, pudicity, transparency, data minimisation

B.Purpose limitation, proportionality, data minimisation, transparency

C.Purpose limitation, proportionality, availability, data minimisation

D.Target group, proportionality, transparency, data minimisation

Question 9

True or False: Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered

A.True

B.False

Question 10

It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures ("whistle blowing")