GAQM ISO / IEC 27002 - Lead Implementer - ISO-IEC-LI Exam Questions [2026]

QUESTION NO: 1
The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

A. Information Security Management System B. Validation of input and output data in applications C. Encryption of information D. The use of tokens to gain access to information systems

Correct Answer: A

QUESTION NO: 2
What do employees need to know to report a security incident?

A. How to report an incident and to whom. B. Who is responsible for the incident and whether it was intentional. C. The measures that should have been taken to prevent the incident in the first place. D. Whether the incident has occurred before and what was the resulting damage.

Correct Answer: A

QUESTION NO: 3
Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

A. The sender, Peter B. The person who drafted the insurance terms and conditions C. The manager, Linda D. The recipient, Rachel

Correct Answer: D

QUESTION NO: 4
We can acquire and supply information in various ways. The value of the information depends on whether it is reliable. What are the reliability aspects of information?

A. Availability, Integrity and Confidentiality B. Availability, Information Value and Confidentiality C. Availability, Integrity and Completeness D. Timeliness, Accuracy and Completeness

Correct Answer: A

QUESTION NO: 5
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

A. When the organization is located near a river. B. When the computer systems are not insured. C. If the risk analysis has not been carried out. D. When computer systems are kept in a cellar below ground level.

Correct Answer: D