GAQM ISO-IEC-LI ISO / IEC 27002 - Lead Implementer Exam Practice Test

The recipient, Rachel

The person who drafted the insurance terms and conditions

The manager, Linda

The sender, Peter

how the InfoSec-objectives will be reached

which InfoSec-controls have been selected and taken

what the implementation-planning of the information security management system is

which Information Security-procedures are selected

Purpose limitation, proportionality, availability, data minimisation

Purpose limitation, proportionality, data minimisation, transparency

Target group, proportionality, transparency, data minimisation

Purpose limitation, pudicity, transparency, data minimisation

How to report an incident and to whom.

Whether the incident has occurred before and what was the resulting damage.

The measures that should have been taken to prevent the incident in the first place.

Who is responsible for the incident and whether it was intentional.

the project manager

specified roles defined in the used project management method of the organization

the InfoSec officer

the owner of the involved asset

True

False

It provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.

Having a PKI shows customers that a web-based business is secure.

By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.

A PKI ensures that backups of company data are made on a regular basis.