Free GAQM ISO27-13-001 Exam Dumps Questions & Answers

Which of the following does a lack of adequate security controls represent?

• A.  Vulnerability
• B.  Impact
• C.  Asset
• D.  Threat

An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.

• A.  True
• B.  False

A planning process that introduced the concept of planning as a cycle that forms the basis for continuous improvement is called:

• A.  time based planning.
• B.  planning for continuous improvement.
• C.  plan, do, check, act.
• D.  RACI Matrix

In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?

• A.  The content of data.
• B.  The degree to which missing, incomplete or incorrect data can be recovered.
• C.  The importance of the business processes that make use of the data.
• D.  The indispensability of data for the business processes.

Which measure is a preventive measure?

• A.  Shutting down all internet traffic after a hacker has gained access to the company systems
• B.  Putting sensitive information in a safe
• C.  Installing a logging system that enables changes in a system to be recognized