FreeQAs
 Request Exam  Contact
  • Home
  • View All Exams
  • New QA's
  • Upload
PRACTICE EXAMS:
  • Oracle
  • Fortinet
  • Juniper
  • Microsoft
  • Cisco
  • Citrix
  • CompTIA
  • VMware
  • ISC
  • SAP
  • EMC
  • PMI
  • HP
  • Salesforce
  • Other
  • Oracle
    Oracle
  • Fortinet
    Fortinet
  • Juniper
    Juniper
  • Microsoft
    Microsoft
  • Cisco
    Cisco
  • Citrix
    Citrix
  • CompTIA
    CompTIA
  • VMware
    VMware
  • ISC
    ISC
  • SAP
    SAP
  • EMC
    EMC
  • PMI
    PMI
  • HP
    HP
  • Salesforce
    Salesforce
  1. Home
  2. PECB Certification
  3. ISO-IEC-27001-Lead-Auditor Exam
  4. PECB.ISO-IEC-27001-Lead-Auditor.v2025-07-02.q187 Dumps
  • ««
  • «
  • …
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • …
  • »
  • »»
Download Now

Question 136

What is a repressive measure in case of a fire?

Correct Answer: B
A repressive measure is a measure that aims to reduce or eliminate the impact of an incident after it has occurred. Putting out a fire after it has been detected by a fire detector is an example of a repressive measure, as it reduces the damage caused by the fire. Taking out a fire insurance is not a repressive measure, but a corrective measure, as it compensates for the loss after the incident. Repairing damage caused by the fire is also not a repressive measure, but a recovery measure, as it restores the normal operation after the incident. Reference: : CQI & IRCA ISO 27001:2022 Lead Auditor Course Handbook, page 28. : CQI & IRCA ISO 27001:2022 Lead Auditor Course Handbook, page 29. : CQI & IRCA ISO 27001:2022 Lead Auditor Course Handbook, page 30.
insert code

Question 137

Which of the following does a lack of adequate security controls represent?

Correct Answer: B
insert code

Question 138

Select the words that best complete the sentence below to describe a third-party audit plan.
To complete the sentence with the best word(s), click on the blank section you want to complete so that it is highlighted in red, and then click on the applicable text from the options below. Alternatively, you may drag and drop the option to the appropriate blank section.

Correct Answer:
insert code

Question 139

Which two of the following are examples of audit methods that 'do' involve human interaction?

Correct Answer: A,B
Audit methods are techniques used by auditors to obtain audit evidence. Audit methods can be classified into two categories: those that involve human interaction and those that do not2. Audit methods that involve human interaction require direct communication between the auditor and the auditee or other relevant parties, such as interviews, questionnaires, surveys, meetings, etc. Audit methods that do not involve human interaction rely on observation, inspection, measurement, testing, sampling, analysis, etc., without requiring any verbal or written exchange2. Therefore, performing an independent review of procedures in preparation for an audit and reviewing the auditee's response to an audit finding are examples of audit methods that involve human interaction, as they require reading and evaluating documents provided by the auditee or other sources. On the other hand, analysing data by remotely accessing the auditee's server and observing work performed by remote surveillance are examples of audit methods that do not involve human interaction, as they do not require any direct communication with the auditee or other parties. References: ISO/IEC 27001:2022 Lead Auditor (Information Security Management Systems) | CQI | IRCA
insert code

Question 140

What is a reason for the classification of information?

Correct Answer: B
Explanation
The reason for the classification of information is to structure the information according to its sensitivity.
Information classification is a process of assigning categories or labels to information based on its value, sensitivity, criticality and legal requirements. Information classification helps to determine the appropriate level of security controls and handling procedures for different types of information. Information classification also facilitates the communication of information security requirements and expectations among internal and external parties. ISO/IEC 27001:2022 requires the organization to classify information in terms of legal requirements, value, criticality and sensitivity to unauthorized disclosure or modification (see clause A.8.2.1).
References: [CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course], ISO/IEC
27001:2022 Information technology - Security techniques - Information security management systems - Requirements, What is Data Classification?
insert code
  • ««
  • «
  • …
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • …
  • »
  • »»
[×]

Download PDF File

Enter your email address to download PECB.ISO-IEC-27001-Lead-Auditor.v2025-07-02.q187 Dumps

Email:

FreeQAs

Our website provides the Largest and the most Latest vendors Certification Exam materials around the world.

Using dumps we provide to Pass the Exam, we has the Valid Dumps with passing guranteed just which you need.

  • DMCA
  • About
  • Contact Us
  • Privacy Policy
  • Terms & Conditions
©2026 FreeQAs

www.freeqas.com materials do not contain actual questions and answers from Cisco's certification exams.