ISO27-13-001 시험 - GAQM실제시험문제와 답 - 100문항

Question No : 1

What type of compliancy standard, regulation or legislation provides a code of practice for information security?

A.ISO/IEC 27002
B.Personal data protection act
C.Computer criminality act
D.IT Service Management

정답:

Question No : 2

Which reliability aspect of information is compromised when a staff member denies having sent a message?

A.Confidentiality
B.Integrity
C.Availability
D.Correctness

정답:

Question No : 3

An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.

A.True
B.False

정답:

Question No : 4

A property of Information that has the ability to prove occurrence of a claimed event.

A.Electronic chain letters
B.Integrity
C.Availability
D.Accessibility

정답:

Question No : 5

What is an example of a human threat?

A.a lightning strike
B.fire
C.phishing
D.thunderstrom

정답:

Question No : 6

Who are allowed to access highly confidential files?

A.Employees with a business need-to-know
B.Contractors with a business need-to-know
C.Employees with signed NDA have a business need-to-know
D.Non-employees designated with approved access and have signed NDA

정답:

Question No : 7

CMM stands for?

A.Capability Maturity Matrix
B.Capacity Maturity Matrix
C.Capability Maturity Model
D.Capable Mature Model

정답:

Question No : 8

How are data and information related?

A.Data is a collection of structured and unstructured information
B.Information consists of facts and statistics collected together for reference or analysis
C.When meaning and value are assigned to data, it becomes information

정답:

Question No : 9

You see a blue color sticker on certain physical assets.
What does this signify?

A.The asset is very high critical and its failure affects the entire organization
B.The asset with blue stickers should be kept air conditioned at all times
C.The asset is high critical and its failure will affect a group/s/project's work in the organization
D.The asset is critical and the impact is restricted to an employee only

정답:

Question No : 10

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

A.Identifying assets and their value
B.Implementing counter measures
C.Establishing a balance between the costs of an incident and the costs of a security measure
D.Determining relevant vulnerabilities and threats

정답:

Question No : 11

An administration office is going to determine the dangers to which it is exposed.
What do we call a possible event that can have a disruptive effect on the reliability of information?

A.dependency
B.threat
C.vulnerability
D.risk

정답:

Question No : 12

As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an
organisational measure to protect laptop computers.
What is the first step in a structured approach to come up with this measure?

A.Appoint security staff
B.Encrypt all sensitive information
C.Formulate a policy
D.Set up an access control procedure

정답:

Question No : 13

You receive the following mail from the IT support team: Dear User, Starting next week, we will be deleting all inactive email accounts in order to create spaceshare the below details in order to continue using your account.
In case of no response,
Name:
Email ID:
Password:
DOB:
Kindly contact the webmail team for any further support. Thanks for your attention.
Which of the following is the best response?

A.Ignore the email
B.Respond it by saying that one should not share the password with anyone
C.One should not respond to these mails and report such email to your supervisor

정답:

Question No : 14

You have a hard copy of a customer design document that you want to dispose off.
What would you do

A.Throw it in any dustbin
B.Shred it using a shredder
C.Give it to the office boy to reuse it for other purposes
D.Be environment friendly and reuse it for writing

정답:

Question No : 15

What is the goal of classification of information?

A.To create a manual about how to handle mobile devices
B.Applying labels making the information easier to recognize
C.Structuring information according to its sensitivity

정답:

GAQM ISO27-13-001 시험