Try ISO : ISOIEC20000LI practice torrent pass for sure

ISO ISOIEC20000LI Exam Overview:

ISO ISOIEC20000LI Exam Syllabus Topics:

ISO Beingcert ISO/IEC 20000 Lead Implementer Sample Questions:

1. Scenario 4: TradeB. a commercial bank that has just entered the market, accepts deposits from its clients and offers basic financial services and loans for investments. TradeB has decided to implement an information security management system (ISMS) based on ISO/IEC 27001 Having no experience of a management
[^system implementation, TradeB's top management contracted two experts to direct and manage the ISMS implementation project.
First, the project team analyzed the 93 controls of ISO/IEC 27001 Annex A and listed only the security controls deemed applicable to the company and their objectives Based on this analysis, they drafted the Statement of Applicability. Afterward, they conducted a risk assessment, during which they identified assets, such as hardware, software, and networks, as well as threats and vulnerabilities, assessed potential consequences and likelihood, and determined the level of risks based on three nonnumerical categories (low, medium, and high). They evaluated the risks based on the risk evaluation criteria and decided to treat only the high risk category They also decided to focus primarily on the unauthorized use of administrator rights and system interruptions due to several hardware failures by establishing a new version of the access control policy, implementing controls to manage and control user access, and implementing a control for ICT readiness for business continuity Lastly, they drafted a risk assessment report, in which they wrote that if after the implementation of these security controls the level of risk is below the acceptable level, the risks will be accepted Which of the actions presented in scenario 4 is NOT compliant with the requirements of ISO/IEC 27001?

A) The Statement of Applicability was drafted before conducting the risk assessment
B) The external experts selected security controls and drafted the Statement of Applicability
C) TradeB selected only ISO/IEC 27001 controls deemed applicable to the company

2. Based on scenario 2. which principle of information security was NOT compromised by the attack?

A) integrity
B) Confidentiality
C) Availability

3. An organization has established a policy that provides the personnel with the information required to effectively deploy encryption solutions in order to protect organizational confidential data. What type of policy is this?

A) High-level general policy
B) Topic-specific policy
C) High-level topic-specific policy

4. What risk treatment option has Company A implemented if it has required from its employees the change of email passwords at least once every 60 days?

A) Risk modification
B) Risk avoidance
C) Risk retention

5. A company decided to use an algorithm that analyzes various attributes of customer behavior, such as browsing patterns and demographics, and groups customers based on their similar characteristics. This way.
the company will be able to identify frequent buyers and trend-followers, among others. What type of machine learning this the company using?

A) Supervised machine learning
B) Decision tree machine learning
C) Unsupervised machine learning

Solutions: