Free PECB ISO-IEC-27001-Lead-Auditor Exam Dumps Questions & Answers

You are performing an ISMS audit at a European-based residential nursing home called ABC that provides healthcare services.
During the audit, you discovered evidence suggesting that ABC may be leaking personal data of residents' family members to a third party for marketing purposes, despite signed agreements prohibiting this.
Complaints were treated as nonconformities, and corrective actions were documented under procedure ISMS L2 10.1.
You decide to write a non-conformity. Select the best sentence for the nonconformity:

• A.  "When reviewing the effectiveness of action taken in response to a nonconformity, an auditor seeks evidence of change that will prevent recurrence of the issue."
• B.  "When evaluating the action taken in response to a nonconformity an auditor seeks evidence of documented information that reduces the probability of a recurrence of the issue."
• C.  "When inspecting the extent of action taken in response to a nonconformity, an auditor seeks comfort that necessary corrections will prevent recurrence of the issue."
• D.  "When examining the completeness of action taken in response to a nonconformity, an auditor seeks an assurance from the auditee that they will prevent recurrence of the issue."
• E.  "When conducting follow up audit of preventive action(s) taken in response to a nonconformity, an auditor seeks evidence confirming that there will be no recurrence of the Issue."
• F.  "When assessing the extent of action taken in response to a nonconformity, an auditor seeks evidence of corrective action that will allow recurrence of the issue."

You are carrying out your first third-party ISMS surveillance audit as an Audit Team Leader. You are presently in the auditee's data centre with another member of your audit team.
You are currently in a large room that is subdivided into several smaller rooms, each of which has a numeric combination lock and swipe card reader on the door. You notice two external contractors using a swipe card and combination number provided by the centre's reception desk to gain access to a client's suite to carry out authorised electrical repairs.
You go to reception and ask to see the door access record for the client's suite. This indicates only one card was swiped. You ask the receptionist and they reply, "yes it's a common problem. We ask everyone to swipe their cards but with contractors especially, one tends to swipe and the rest simply 'tailgate' their way in" but we know who they are from the reception sign-in.
Based on the scenario above which one of the following actions would you now take?

• A.  Determine whether any additional effective arrangements are in place to verify individual access to secure areas e.g. CCTV
• B.  Raise a nonconformity against control A.5.20 'addressing information security in supplier relationships' as information security requirements have not been agreed upon with the supplier
• C.  Raise a nonconformity against control A.7.6 'working in secure areas' as security measures for working in secure areas have not been defined
• D.  Take no action. Irrespective of any recommendations, contractors will always act in this way
• E.  Raise a nonconformity against control A.7.2 'physical entry' as a secure area is not adequately protected
• F.  Raise an opportunity for improvement to have a large sign in reception reminding everyone requiring access must use their swipe card at all times
• G.  Tell the organisation they must write to their contractors, reminding them of the need to use access cards appropriately
• H.  Raise an opportunity for improvement that contractors must be accompanied at all times when accessing secure facilities

The following are purposes of Information Security, except:

• A.  Ensure Business Continuity
• B.  Maximize Return on Investment
• C.  Minimize Business Risk
• D.  Increase Business Assets

You are an experienced ISMS audit team leader providing guidance to an auditor in training.
The auditor in training appears to be confused about the interpretation of competence in ISO 27001:2022 and is seeking clarification from you that his understanding is correct. He sets out a series of mini scenarios and asks you which of these you would attribute to a lack of competence. Select four correct options.

• A.  A senior programmer did not check their coding for errors as they were running late for a doctor's appointment
• B.  An IT technician failed to configure a new model of server correctly as a result of not reading the supplied instructions
• C.  A senior manager could not assist in the organisation's information security incident recovery process as she had not received the required training
• D.  An employee recently transferred from the IT networks team to Software development was unaware of the need to complete product release forms prior to shipping
• E.  A new starter was unable to switch on CCTV monitoring because they had not been shown how to do this
• F.  An experienced receptionist allowed a contractor she recognised to enter the data centre without his access card
• G.  A system administrator deleted two live accounts as well as five redundant accounts as a result of receiving an incorrect instruction
• H.  A data centre operator inadvertently placed a backup tape into an incorrect drive because they were in a hurry to move on to another task

You are conducting an ISMS audit in the despatch department of an international logistics organisation that provides shipping services to large organisations including local hospitals and government offices. Parcels typically contain pharmaceutical products, biological samples, and documents such as passports and driving licences. You note that the company records show a very large number of returned items with causes including mis-addressed labels and, in 15% of company cases, two or more labels for different addresses for the one package. You are interviewing the Shipping Manager (SM).
You: Are items checked before being dispatched?
SH: Any obviously damaged items are removed by the duty staff before being dispatched, but the small profit margin makes it uneconomic to implement a formal checking process.
You: What action is taken when items are returned?
SM: Most of these contracts are relatively low value, therefore it has been decided that it is easier and more convenient to simply reprint the label and re-send individual parcels than it is to implement an investigation.
You raise a nonconformity. Referencing the scenario, which six of the following Appendix A controls would you expect the auditee to have implemented when you conduct the follow-up audit?

• A.  5.3 Segregation of duties
• B.  7.10 Storage media
• C.  8.12 Data leakage protection
• D.  6.4 Disciplinary process
• E.  7.4 Physical security monitoring
• F.  8.3 Information access restriction
• G.  5.32 Intellectual property rights
• H.  5.11 Return of assets
• I.  6.3 Information security awareness, education, and training
• J.  5.6 Contact with special interest groups
• K.  5.13 Labelling of information