ISO ISOIEC20000LI Prüfungsfragen : Beingcert ISO/IEC 20000 Lead Implementer Exam

Ob druckbare PDF, Desktop-Testengine oder Online-Testengine – PrüfungFrage bietet die 123 Prüfungsfragen zu ISO Beingcert ISO/IEC 20000 Lead Implementer in drei Formaten an. So lernen Sie für die ISOIEC20000LI Prüfung genau so, wie es zu Ihrem Alltag passt.

ISO ISOIEC20000LI Prüfungsübersicht:

Zertifizierungsanbieter:	Beingcert
Prüfungsname:	Prüfung zum ISO/IEC 20000 Lead Implementer
Prüfungsnummer:	ISOIEC20000LI
Verfügbare Sprachen:	Englisch
Verwandte Zertifizierungen:	ISO/IEC 20000 Foundation ISO/IEC 20000 Lead Auditor
Prüfungsformat:	Multiple-Choice-Fragen
Beispielfragen:
Prüfungsmethode:	Online oder vor Ort (je nach autorisiertem Prüfungszentrum von Beingcert)
Voraussetzungen:	Empfohlen werden Grundkenntnisse im Bereich des IT-Dienstemanagements sowie Wissen auf dem Niveau ISO/IEC 20000 Foundation

ISO ISOIEC20000LI Prüfungsthemen:

Wissenswertes rund um ISO Beingcert ISO/IEC 20000 Lead Implementer im FAQ

ISO Beingcert ISO/IEC 20000 Lead Implementer ISOIEC20000LI Prüfungsfragen mit Lösungen

Frage #1

Scenario 10: NetworkFuse develops, manufactures, and sells network hardware. The company has had an operational information security management system (ISMS) based on ISO/IEC 27001 requirements and a quality management system (QMS) based on ISO 9001 for approximately two years. Recently, it has applied for a j^ombined certification audit in order to obtain certification against ISO/IEC 27001 and ISO 9001.
After selecting the certification body, NetworkFuse prepared the employees for the audit The company decided to not conduct a self-evaluation before the audit since, according to the top management, it was not necessary. In addition, it ensured the availability of documented information, including internal audit reports and management reviews, technologies in place, and the general operations of the ISMS and the QMS.
However, the company requested from the certification body that the documentation could not be carried off- site However, the audit was not performed within the scheduled days because NetworkFuse rejected the audit team leader assigned and requested their replacement The company asserted that the same audit team leader issued a recommendation for certification to its main competitor, which, for the company's top management, was a potential conflict of interest. The request was not accepted by the certification body The certification body rejected NetworkFuse's request to change the audit team leader. Is this acceptable?
Refer to scenario 10.

A. Yes, because NetworkFuse did not give a valid reason to support their claims
B. No, because an auditee cannot request the rejection of an audit team member
C. No, auditee's requests for the replacement of auditors must be accepted

Frage #2

Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed tor threat detection, including the detection of malicious files which could be the cause of possible future attacks.
Based on these findings. Texas H$H inc, decided to modify its access security system to avoid future incidents and integrate an incident management policy in their Information security policy that could serve as guidance for employees on how to respond to similar incidents.
Based on the scenario above, answer the following question:
Texas M&H Inc. decided to integrate the incident management policy to the existent information security policy. How do you define this situation?

A. Acceptable, but only if the incident management policy addresses environmental, or health and safety issues
B. Acceptable, the incident management policy may be integrated into the overall information security policy of the organization
C. Unacceptable, the incident management policy should be drafted as a separate document in order to be clear and effective

Frage #3

What action should UX Software take to mitigate residual risks? Refer to scenario 4.

A. UX Software should immediately implement new controls to treat all residual risks
B. UX Software should accept the residual risks only above the acceptance level
C. UX Software should evaluate, calculate, and document the value of risk reduction following risk treatment

Frage #4

Scenario 4: TradeB. a commercial bank that has just entered the market, accepts deposits from its clients and offers basic financial services and loans for investments. TradeB has decided to implement an information security management system (ISMS) based on ISO/IEC 27001 Having no experience of a management
[^system implementation, TradeB's top management contracted two experts to direct and manage the ISMS implementation project.
First, the project team analyzed the 93 controls of ISO/IEC 27001 Annex A and listed only the security controls deemed applicable to the company and their objectives Based on this analysis, they drafted the Statement of Applicability. Afterward, they conducted a risk assessment, during which they identified assets, such as hardware, software, and networks, as well as threats and vulnerabilities, assessed potential consequences and likelihood, and determined the level of risks based on three nonnumerical categories (low, medium, and high). They evaluated the risks based on the risk evaluation criteria and decided to treat only the high risk category They also decided to focus primarily on the unauthorized use of administrator rights and system interruptions due to several hardware failures by establishing a new version of the access control policy, implementing controls to manage and control user access, and implementing a control for ICT readiness for business continuity Lastly, they drafted a risk assessment report, in which they wrote that if after the implementation of these security controls the level of risk is below the acceptable level, the risks will be accepted What should TradeB do in order to deal with residual risks? Refer to scenario 4.

A. TradeB should immediately implement new controls to treat all residual risks
B. TradeB should accept the residual risks only above the acceptance level
C. TradeB should evaluate, calculate, and document the value of risk reduction following risk treatment

Frage #5

An organization that has an ISMS in place conducts management reviews at planned intervals, but does not retain documented information on the results. Is this in accordance with the requirements of ISO/IEC 27001?

A. No, ISO/IEC 27001 requires organizations to document the results of management reviews
B. Yes. ISO/IEC 27001 does not require organizations to document the results of management reviews
C. Yes. ISO/IEC 27001 requires organizations to document the results of management reviews only if they are conducted ad hoc

Fragen und Antworten: