ISO-IEC-27001-Lead-Implementer Exam Questions and Answers

QUESTION: 114 Exam Topic: Scenario 15

Texas H&H Inc. is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. The company decided to utilize cloud storage services which best suited its needs, due to the large amount of data that the company processes daily. Recently, Texas H&H Inc. learned that the cloud storage provider that it uses has been publicly compromised.
Being aware of the high risk of data exposure, the security administrators of Texas H&H Inc. decided to undertake actions that could prevent a potential attack. In the absence of an information security incident management policy, their response was based on their knowledge gained from previous incidents. They tested their systems for any malicious activity or violation and checked if the cloud-based email settings were changed. By quickly responding to the exploited vulnerability that was found, the team was able to prevent the attack.
Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed for threat detection, including the detection of malicious files which could be the cause of possible future attacks
Based on these findings, Texas H&H Inc. decided to modify its access security system to avoid future incidents and integrate an incident management policy in their information security policy that could serve as guidance for employees on how to respond to similar incidents.
Hide Case Study

According to scenario 15, the team prevented a potential attack based on knowledge gained from previous incidents. Is this acceptable?

No, before responding to an information security incident, an information security incident management policy must be established
No, every information security incident is different, hence knowledge gained from previous incidents cannot prevent potential attacks
Yes, in the absence of an information security incident management policy, lessons learned can be applied

Answer(s): C

Reveal Solution Next Question

QUESTION: 115 Exam Topic: Scenario 15

Show Case Study

Texas H&H Inc. is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. The company decided to utilize cloud storage services which best suited its needs, due to the large amount of data that the company processes daily. Recently, Texas H&H Inc. learned that the cloud storage provider that it uses has been publicly compromised.
Being aware of the high risk of data exposure, the security administrators of Texas H&H Inc. decided to undertake actions that could prevent a potential attack. In the absence of an information security incident management policy, their response was based on their knowledge gained from previous incidents. They tested their systems for any malicious activity or violation and checked if the cloud-based email settings were changed. By quickly responding to the exploited vulnerability that was found, the team was able to prevent the attack.
Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed for threat detection, including the detection of malicious files which could be the cause of possible future attacks
Based on these findings, Texas H&H Inc. decided to modify its access security system to avoid future incidents and integrate an incident management policy in their information security policy that could serve as guidance for employees on how to respond to similar incidents.
Hide Case Study

Based on scenario 15, what else should Texas H&H Inc. do when responding to the incident?

Decide to stop using cloud services in order to eliminate the risk of similar incidents happening in the future
Record and document the incident which serves as input for future corrective actions
Communicate the updated information security policy only to the top management of the company

Answer(s): B

Reveal Solution Next Question

QUESTION: 116 Exam Topic: Scenario 15

Show Case Study

Texas H&H Inc. is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. The company decided to utilize cloud storage services which best suited its needs, due to the large amount of data that the company processes daily. Recently, Texas H&H Inc. learned that the cloud storage provider that it uses has been publicly compromised.
Being aware of the high risk of data exposure, the security administrators of Texas H&H Inc. decided to undertake actions that could prevent a potential attack. In the absence of an information security incident management policy, their response was based on their knowledge gained from previous incidents. They tested their systems for any malicious activity or violation and checked if the cloud-based email settings were changed. By quickly responding to the exploited vulnerability that was found, the team was able to prevent the attack.
Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed for threat detection, including the detection of malicious files which could be the cause of possible future attacks
Based on these findings, Texas H&H Inc. decided to modify its access security system to avoid future incidents and integrate an incident management policy in their information security policy that could serve as guidance for employees on how to respond to similar incidents.
Hide Case Study

Which situation described in scenario 15 indicates that Texas H&H Inc. implemented a detective control?

Texas H&H Inc integrated the incident management policy in its information security policy
Texas H&H Inc. tested its system for malicious activity and checked cloud-based email settings
Texas H&H Inc. hired an expert to conduct a forensic analysis

Answer(s): B

Reveal Solution Next Question

QUESTION: 117 Exam Topic: Scenario 15

Show Case Study

Texas H&H Inc. is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. The company decided to utilize cloud storage services which best suited its needs, due to the large amount of data that the company processes daily. Recently, Texas H&H Inc. learned that the cloud storage provider that it uses has been publicly compromised.
Being aware of the high risk of data exposure, the security administrators of Texas H&H Inc. decided to undertake actions that could prevent a potential attack. In the absence of an information security incident management policy, their response was based on their knowledge gained from previous incidents. They tested their systems for any malicious activity or violation and checked if the cloud-based email settings were changed. By quickly responding to the exploited vulnerability that was found, the team was able to prevent the attack.
Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed for threat detection, including the detection of malicious files which could be the cause of possible future attacks
Based on these findings, Texas H&H Inc. decided to modify its access security system to avoid future incidents and integrate an incident management policy in their information security policy that could serve as guidance for employees on how to respond to similar incidents.
Hide Case Study

Following a reported event, an information security event ticket has been completed and its priority has been assigned. Then, the event has been evaluated to determine if it is an information security incident. Which phase of the incident management has been completed?

Initial assessment and decision
Detection and reporting
Evaluation and confirmation

Answer(s): A

Reveal Solution Next Question

QUESTION: 118 Exam Topic: Scenario 15

Show Case Study

Texas H&H Inc. is a multinational corporation headquartered in Boston, MA, which provides professional electronics, gaming, and entertainment services. The company decided to utilize cloud storage services which best suited its needs, due to the large amount of data that the company processes daily. Recently, Texas H&H Inc. learned that the cloud storage provider that it uses has been publicly compromised.
Being aware of the high risk of data exposure, the security administrators of Texas H&H Inc. decided to undertake actions that could prevent a potential attack. In the absence of an information security incident management policy, their response was based on their knowledge gained from previous incidents. They tested their systems for any malicious activity or violation and checked if the cloud-based email settings were changed. By quickly responding to the exploited vulnerability that was found, the team was able to prevent the attack.
Once they made sure that the attackers do not have access in their system, the security administrators decided to proceed with the forensic analysis. They concluded that their access security system was not designed for threat detection, including the detection of malicious files which could be the cause of possible future attacks
Based on these findings, Texas H&H Inc. decided to modify its access security system to avoid future incidents and integrate an incident management policy in their information security policy that could serve as guidance for employees on how to respond to similar incidents.
Hide Case Study

What should an organization demonstrate through documentation?

That the complexity of processes and their interactions is documented
That the distribution of paper copies is regularly complete
That its security controls are implemented based on risk scenarios

Answer(s): C

Reveal Solution Next Question

PECB ISO-IEC-27001-Lead-Implementer Exam (page: 4) PECB ISO/IEC 27001 Lead Implementer Updated on: 25-Dec-2025

QUESTION: 114 Exam Topic: Scenario 15

QUESTION: 115 Exam Topic: Scenario 15

QUESTION: 116 Exam Topic: Scenario 15

QUESTION: 117 Exam Topic: Scenario 15

QUESTION: 118 Exam Topic: Scenario 15

PECB ISO-IEC-27001-Lead-Implementer Exam (page: 4)
PECB ISO/IEC 27001 Lead Implementer
Updated on: 25-Dec-2025