Exam Lead Implementer topic 1 question 41 discussion

Actual exam question from PECB's Lead Implementer

Question #: 41
Topic #: 1

An organization has justified the exclusion of control 5.18 Access rights of ISO/IEC 27001 in the Statement of Applicability (SoA) as follows: “An access control reader is already installed at the main entrance of the building.” Which statement is correct?

A. The justification for the exclusion of a control is not required to be included in the SoA
B. The justification is not acceptable, because it does not reflect the purpose of control 5.18
C. The justification is not acceptable because it does not indicate that it has been selected based on the risk assessment results

Show Suggested Answer

Suggested Answer: B 🗳️

by CHUEY at Jan. 28, 2025, 11:57 a.m.

Comments

Submit Cancel

CHUEY

2 months ago

Selected Answer: B

** Control 5.18 covers - Identity and Access Management**

upvoted 1 times

...

CHUEY

2 months ago

Selected Answer: B

Answer is B , justification is not acceptable and does not reflect the purpose of control 5.18. Control Control 5.18 enables an organisation to establish and implement appropriate procedures and controls to assign, modify and revoke access rights to information systems in compliance with the organisation’s access control policy and its access controls.

upvoted 1 times

...

Exam Lead Implementer All Questions

View all questions & answers for the Lead Implementer exam

Exam Lead Implementer topic 1 question 41 discussion

Comments

CHUEY

CHUEY

SY0-701