Free Practice Questions for GAQM ISO-IEC-LI Exam

Question 1

What is an example of a security incident?

AThe lighting in the department no longer works.

BA member of staff loses a laptop.

CYou cannot set the correct fonts in your word processing software.

DA file is saved under an incorrect name.

Correct Answer: B. A member of staff loses a laptop.

Question 2

What is an example of a good physical security measure?

AAll employees and visitors carry an access pass.

BPrinters that are defective or have been replaced are immediately removed and given away as garbage for recycling.

CMaintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Correct Answer: A. All employees and visitors carry an access pass.

Question 3

Responsibilities for information security in projects should be defined and allocated to:

Athe project manager

Bspecified roles defined in the used project management method of the organization

Cthe InfoSec officer

Dthe owner of the involved asset

Correct Answer: B. specified roles defined in the used project management method of the organization

Question 4

What is the greatest risk for an organization if no information security policy has been defined?

AIf everyone works with the same account, it is impossible to find out who worked on what.

BInformation security activities are carried out by only a few people.

CToo many measures are implemented.

DIt is not possible for an organization to implement information security in a consistent manner.

Correct Answer: D. It is not possible for an organization to implement information security in a consistent manner.

Question 5

A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

AIf the risk analysis has not been carried out.

BWhen computer systems are kept in a cellar below ground level.

CWhen the computer systems are not insured.

DWhen the organization is located near a river.

Correct Answer: B. When computer systems are kept in a cellar below ground level.

Question 6

Prior to employment, _________ as well as terms & conditions of employment are included as controls in ISO 27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.

Ascreening

Bauthorizing

Ccontrolling

Dflexing

Correct Answer: A. screening