GAQM ISO / IEC 27002 - Lead Implementer ISO-IEC-LI Exam Dumps: Updated Questions & Answers (December 2025)

Risk bearing

Risk avoiding 

Risk neutral

Risk passing

If everyone works with the same account, it is impossible to find out who worked on what.

Information security activities are carried out by only a few people.

Too many measures are implemented.

It is not possible for an organization to implement information security in a consistent manner.

The costs for automating are easier to charge to the responsible departments.

A determination can be made as to which report should be printed first and which ones can wait a little longer.

Everyone can easily see how sensitive the reports' contents are by consulting the grading label.

Reports can be developed more easily and with fewer errors.

Restriction of access to information

Return of assets

Management of access rights with special privileges

Withdrawal or adaptation of access rights

screening

authorizing

controlling

flexing

A risk analysis is a method of mapping risks without looking at company processes.

A risk analysis helps to estimate the risks and develop the appropriate security measures.

A risk analysis calculates the exact financial consequences of damages.

Incorporating an Intrusion Detection System (IDS) in the design of a computer center

Installing a virus scanner in an information system

Making a backup of the data that has been created or altered that day

Restoring a backup of the correct database after a corrupt copy of the database was written over the original

All employees and visitors carry an access pass.

Printers that are defective or have been replaced are immediately removed and given away as garbage for recycling.

Maintenance staff can be given quick and unimpeded access to the server area in the event of disaster.

Purpose limitation, proportionality, availability, data minimisation

Purpose limitation, proportionality, data minimisation, transparency

Target group, proportionality, transparency, data minimisation

Purpose limitation, pudicity, transparency, data minimisation

It provides digital certificates that can be used to digitally sign documents. Such signatures irrefutably determine from whom a document was sent.

Having a PKI shows customers that a web-based business is secure.

By providing agreements, procedures and an organization structure, a PKI defines which person or which system belongs to which specific public key.

A PKI ensures that backups of company data are made on a regular basis.