Pecb spoto sure Pass Exam Iso-iec-27001-lead-implementer Pdf by Yaqub q5 vce pdf

Page: 19 / 21

Exam Name:	PECB Certified ISO/IEC 27001 : 2022 Lead Implementer exam
Exam Code:	ISO-IEC-27001-Lead-Implementer Dumps
Vendor:	PECB	Certification:	ISO 27001
Questions:	293 Q&A's	Shared By:	yaqub

Question 76

Which statement is an example of risk retention?

Options:

An organization has decided to release the software even though some minor bugs have not been fixed yet

An organization has implemented a data loss protection software

An organization terminates work in the construction site during a severe storm

Discussion

Josie

I just passed my certification exam using their dumps and I must say, I was thoroughly impressed.

Fatimah Sep 15, 2025

You’re right. The dumps were authentic and covered all the important topics. I felt confident going into the exam and it paid off.

Hassan

Highly Recommended Dumps… today I passed my exam! Same questions appear. I bought Full Access.

Kasper Sep 11, 2025

Hey wonderful….so same questions , sounds good. Planning to write this week, I will go for full access today.

Marley

Hey, I heard the good news. I passed the certification exam!

Jaxson Sep 11, 2025

Yes, I passed too! And I have to say, I couldn't have done it without Cramkey Dumps.

Lennie

I passed my exam and achieved wonderful score, I highly recommend it.

Emelia Sep 14, 2025

I think I'll give Cramkey a try next time I take a certification exam. Thanks for the recommendation!

Question 77

Invalid Electric, a manufacturer of electrical components, is preparing for its upcoming ISO 27001 certification audit. This is the first time the company has undergone such an audit, and many of its employees are not familiar with the process. The management team is concerned that employees may not be adequately prepared for interviews and the scrutiny of documentation during the audit.

To ensure that employees are ready for the audit, the management team is considering several options to help them understand what to expect and how to handle the auditor's questions confidently.

Based on scenario 10. did invalid Electric provide a valid reason for requesting the replacement of the audit learn leader?

Options:

No, because Issuing a recommendation for certification lo a main competitor is not a conflict of interest situation

No, because the auditee can request the replacement of an auditor only if the auditor has worked for the auditee

Yes, because the auditee can request to replace an auditor that has worked for one of its major competitors

Discussion

Question 78

An organization has justified the exclusion of control 5.18 Access rights of ISO/IEC 27001 in the Statement of Applicability (SoA) as follows: "An access control reader is already installed at the main entrance of the building." Which statement is correct'

Options:

The justification for the exclusion of a control is not required to be included in the SoA

The justification is not acceptable, because it does not reflect the purpose of control 5.18

The justification is not acceptable because it does not indicate that it has been selected based on the risk assessment results

Discussion

Answer:

Explanation:

According to ISO/IEC 27001:2022, clause 6.1.3, the Statement of Applicability (SoA) is a document that identifies the controls that are applicable to the organization’s ISMS and explains why they are selected or not. The SoA is based on the results of the risk assessment and risk treatment, which are the previous steps in the risk management process. Therefore, the justification for the exclusion of a control should be based on the risk assessment results and the risk treatment plan, and should reflect the purpose and objective of the control.

Control 5.18 of ISO/IEC 27001:2022 is about access rights to information and other associated assets, which should be provisioned, reviewed, modified and removed in accordance with the organization’s topic-specific policy on and rules for access control. The purpose of this control is to prevent unauthorized access to, modification of, and destruction of information assets. Therefore, the justification for the exclusion of this control should explain why the organization does not need to implement this control to protect its information assets from unauthorized access.

The justification given by the organization in the question is not acceptable, because it does not reflect the purpose of control 5.18. An access control reader at the main entrance of the building is a physical security measure, which is related to control 5.15 of ISO/IEC 27001:2022, not control 5.18. Control 5.18 is about logical access rights to information systems and services, which are not addressed by the access control reader. Therefore, the organization should either provide a valid justification for the exclusion of control 5.18, or include it in the SoA and implement it according to the risk assessment and risk treatment results.

[: ISO/IEC 27001:2022, clause 6.1.3, control 5.18; PECB ISO/IEC 27001 Lead Implementer Course, Module 5, slide 18, Module 6, slide 10., ]

Question 79

A tech company rapidly expanded its operations over the past few years. Its information system, consisting of servers, databases, and communication tools, is a critical part of its daily operations. However, due to rapid growth and increased data flow, the company is now facing a saturation of its information system. This saturation has led to slower response times, increased downtime, and difficulty in managing the overwhelming volume of data. In which category does this threat fall into?

Options:

Infrastructure failures

Technical failures

Compromise of functions