QUESTION: 126 Exam Topic: Scenario 16

Company X restricted the access of the internal auditor to some of its documentation taking into account its confidentiality. Is this acceptable?

Yes, it is up to the company to determine what an internal auditor can access
Yes, confidential information should not be accessed by internal auditors
No, restricting the internal auditor s access to offices and documentation can negatively affect the internal audit process

Answer(s): C

Reveal Solution Next Question

QUESTION: 112 Exam Topic: Scenario 15

View Related Case Study

Based on the scenario above, answer the following question:
Texas H&H Inc. decided to integrate the incident management policy to the existent information security policy. How do you define this situation?

Acceptable, the incident management policy may be integrated into the overall information security policy of the organization
Acceptable, but only if the incident management policy addresses environmental, or health and safety issues
Unacceptable, the incident management policy should be drafted as a separate document in order to be clear and effective

Answer(s): A

Reveal Solution Next Question

QUESTION: 113 Exam Topic: Scenario 15

View Related Case Study

Texas H&H Inc. decided to assign an internal expert for their forensic analysis. Is this acceptable? Refer to scenario 15.

Yes, forensic analysis can be done by either an internal or external expert
Yes, hiring an external expert for forensic analysis is a requirement of the standard
No, the company's forensic analysis should be based on the conclusion of its cloud storage provide investigation

Answer(s): A

Reveal Solution Next Question

QUESTION: 114 Exam Topic: Scenario 15

View Related Case Study

According to scenario 15, the team prevented a potential attack based on knowledge gained from previous incidents. Is this acceptable?

No, before responding to an information security incident, an information security incident management policy must be established
No, every information security incident is different, hence knowledge gained from previous incidents cannot prevent potential attacks
Yes, in the absence of an information security incident management policy, lessons learned can be applied

Answer(s): C

Reveal Solution Next Question

Free ISO-IEC-27001-Lead-Implementer Exam Braindumps (page: 4)

QUESTION: 126 Exam Topic: Scenario 16

QUESTION: 112 Exam Topic: Scenario 15

QUESTION: 113 Exam Topic: Scenario 15

QUESTION: 114 Exam Topic: Scenario 15