Free ISO27-13-001 Exam Braindumps
ISO 27001 : 2013 - Certified Lead Auditor Questions 36–40 (page: 9)

Updated On: 9-Feb-2026

What is the purpose of an Information Security policy?

  1. An information security policy makes the security plan concrete by providing the necessary details
  2. An information security policy provides insight into threats and the possible consequences
  3. An information security policy provides direction and support to the management regarding information security
  4. An information security policy documents the analysis of risks and the search for countermeasures

Answer(s): C



After a devastating office fire, all staff are moved to other branches of the company. At what moment in the incident management process is this measure effectuated?

  1. Between incident and damage
  2. Between detection and classification
  3. Between recovery and normal operations
  4. Between classification and escalation

Answer(s): A



What type of measure involves the stopping of possible consequences of security incidents?

  1. Corrective
  2. Detective
  3. Repressive
  4. Preventive

Answer(s): C



What is a reason for the classification of information?

  1. To provide clear identification tags
  2. To structure the information according to its sensitivity
  3. Creating a manual describing the BYOD policy

Answer(s): B



Which of the following is a preventive security measure?

  1. Installing logging and monitoring software
  2. Shutting down the Internet connection after an attack
  3. Storing sensitive information in a data save

Answer(s): C



Viewing page 9 of 21
Viewing questions 41 - 45 out of 100 questions


Post your Comments and Discuss GAQM ISO27-13-001 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!