GAQM ISO27-13-001 問題練習

Question No : 1
What type of compliancy standard, regulation or legislation provides a code of practice for information security?

• A.ISO/IEC 27002
• B.Personal data protection act
• C.Computer criminality act
• D.IT Service Management

答えを確認する

正解:

Question No : 2
Which reliability aspect of information is compromised when a staff member denies having sent a message?

• A.Confidentiality
• B.Integrity
• C.Availability
• D.Correctness

答えを確認する

正解:

Question No : 3
An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.

• A.True
• B.False

答えを確認する

正解:

Question No : 4
A property of Information that has the ability to prove occurrence of a claimed event.

• A.Electronic chain letters
• B.Integrity
• C.Availability
• D.Accessibility

答えを確認する

正解:

Question No : 5
What is an example of a human threat?

• A.a lightning strike
• B.fire
• C.phishing
• D.thunderstrom

答えを確認する

正解:

Question No : 6
Who are allowed to access highly confidential files?

• A.Employees with a business need-to-know
• B.Contractors with a business need-to-know
• C.Employees with signed NDA have a business need-to-know
• D.Non-employees designated with approved access and have signed NDA

答えを確認する

正解:

Question No : 7
CMM stands for?

• A.Capability Maturity Matrix
• B.Capacity Maturity Matrix
• C.Capability Maturity Model
• D.Capable Mature Model

答えを確認する

正解:

Question No : 8
How are data and information related?

• A.Data is a collection of structured and unstructured information
• B.Information consists of facts and statistics collected together for reference or analysis
• C.When meaning and value are assigned to data, it becomes information

答えを確認する

正解:

Question No : 9
You see a blue color sticker on certain physical assets.
What does this signify?

• A.The asset is very high critical and its failure affects the entire organization
• B.The asset with blue stickers should be kept air conditioned at all times
• C.The asset is high critical and its failure will affect a group/s/project's work in the organization
• D.The asset is critical and the impact is restricted to an employee only

答えを確認する

正解:

Question No : 10
A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

• A.Identifying assets and their value
• B.Implementing counter measures
• C.Establishing a balance between the costs of an incident and the costs of a security measure
• D.Determining relevant vulnerabilities and threats

答えを確認する

正解:

Question No : 11
An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?

• A.dependency
• B.threat
• C.vulnerability
• D.risk

答えを確認する

正解:

Question No : 12
As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an
organisational measure to protect laptop computers.
What is the first step in a structured approach to come up with this measure?

• A.Appoint security staff
• B.Encrypt all sensitive information
• C.Formulate a policy
• D.Set up an access control procedure

答えを確認する

正解:

Question No : 13
You receive the following mail from the IT support team: Dear User, Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below details in order to continue using your account.
In case of no response,
Name:
Email ID:
Password:
DOB:
Kindly contact the webmail team for any further support. Thanks for your attention.
Which of the following is the best response?

• A.Ignore the email
• B.Respond it by saying that one should not share the password with anyone
• C.One should not respond to these mails and report such email to your supervisor

答えを確認する

正解:

Question No : 14
You have a hard copy of a customer design document that you want to dispose off.
What would you do

• A.Throw it in any dustbin
• B.Shred it using a shredder
• C.Give it to the office boy to reuse it for other purposes
• D.Be environment friendly and reuse it for writing

答えを確認する

正解:

Question No : 15
What is the goal of classification of information?

• A.To create a manual about how to handle mobile devices
• B.Applying labels making the information easier to recognize
• C.Structuring information according to its sensitivity

答えを確認する

正解: