ISO / IEC 27002 - Lead Implementer Exam Questions and Answers (Page: 2)

QUESTION: 6

What do employees need to know to report a security incident?

How to report an incident and to whom.
Whether the incident has occurred before and what was the resulting damage.
The measures that should have been taken to prevent the incident in the first place.
Who is responsible for the incident and whether it was intentional.

Answer(s): A

Reveal Solution Next Question

QUESTION: 7

What is an example of a good physical security measure?

All employees and visitors carry an access pass.
Printers that are defective or have been replacedare immediately removed and given away as garbage for recycling.
Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Answer(s): A

Reveal Solution Next Question

QUESTION: 8

What is the greatest risk for an organization ifno information security policy has been defined?

If everyone works with the same account, it is impossible to find out who worked on what.
Information security activities are carried out by only a few people.
Too many measures areimplemented.
It is not possible for an organization to implement information security in a consistent manner.

Answer(s): D

Reveal Solution Next Question

Midwest Insurance grades the monthly report of all claimed losses per insured as confidential. What is accomplished if all other reports from this insurance office are also assigned the appropriate grading?

The costs for automating are easier to charge to the responsible departments.
A determination can be made as to which report should be printed firstand which ones can wait a little longer.
Everyone can easily see how sensitive the reports' contents are by consulting the grading label.
Reports can be developed more easily and with fewer errors.

Answer(s): C

Reveal Solution Next Question

QUESTION: 10

What is the ISO / IEC 27002 standard?

It is a guide of good practices that describes the controlobjectives and recommended controls regarding information security.
It is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001
It is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

Answer(s): A

Reveal Solution Next Question

GAQM ISO / IEC 27002 - Lead Implementer Exam (page: 2)
GAQM ISO / IEC 27002 - Lead Implementer
Updated on: 12-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

GAQM ISO / IEC 27002 - Lead Implementer Exam (page: 2) GAQM ISO / IEC 27002 - Lead Implementer Updated on: 12-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

GAQM ISO / IEC 27002 - Lead Implementer Exam (page: 2)
GAQM ISO / IEC 27002 - Lead Implementer
Updated on: 12-Feb-2026