exam questions

Exam Lead Implementer All Questions

View all questions & answers for the Lead Implementer exam

Exam Lead Implementer topic 1 question 31 discussion

Actual exam question from PECB's Lead Implementer
Question #: 31
Topic #: 1
[All Lead Implementer Questions]

Which of the actions presented in scenario 4 is NOT compliant with the requirements of ISO/IEC 27001?

  • A. TradeB selected only ISO/IEC 27001 controls deemed applicable to the company
  • B. The Statement of Applicability was drafted before conducting the risk assessment
  • C. The external experts selected security controls and drafted the Statement of Applicability
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Acrisius
2 months ago
Selected Answer: B
The answer here is B The statement of applicability or SoA Contains All necessary controls and for each Justification for inclusion Whether the controls implemented or not Justification for exclusion Development of the SoA is part of the risk treatment process As per ISO27005 after it has prioritised the risk for risk treatment the organisation Determines the controls and develops the SoA then risk plan. See PECB day 2 page 139
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago