Free GAQM ISO-ISMS-LA Practice Test & Real Exam Questions

Exam Code/Number: ISO-ISMS-LA
Exam Name/Title: ISO 27001 : 2013 ISMS - Certified Lead Auditor
Certification Provider: GAQM
Corresponding Certification: GAQM: ISO

Exam Questions: 99
Updated On: Aug 29, 2026

Question #1

The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?

A. a logical security measure

B. a corrective security measure

C. a repressive security measure

D. a physical security measure

Discussion 0

Correct Answer: D Vote an answer

Question #2

A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company's information is worth more and more and gone are the days when you could keep control yourself.
You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?

A. This analysis follows a precise statistical probability calculation in order to calculate exact loss caused by damage.

B. This analysis is based on scenarios and situations and produces a subjective view of the possible threats.

Discussion 0

Correct Answer: B Vote an answer

Question #3

Stages of Information

A. creation, distribution, use, maintenance, disposition

B. creation, distribution, maintenance, disposition, use

C. creation, use, disposition, maintenance, evolution

D. creation, evolution, maintenance, use, disposition

Discussion 0

Correct Answer: A Vote an answer

Question #4

Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

A. Malware threat

B. Organisational threat

C. Social engineering threat

D. Technical threat

Discussion 0

Correct Answer: C Vote an answer

Question #5

What is social engineering?

A. Creating a situation wherein a third party gains confidential information from you

B. A group planning for a social activity in the organization

C. The organization planning an activity for welfare of the neighborhood

Discussion 0

Correct Answer: A Vote an answer

Question #6

Which of the following is a possible event that can have a disruptive effect on the reliability of information?

A. Vulnerability

B. Risk

C. Dependency

D. Threat

Discussion 0

Correct Answer: D Vote an answer

Question #7

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

A. Establishing a balance between the costs of an incident and the costs of a security measure

B. Identifying assets and their value

C. Determining relevant vulnerabilities and threats

D. Implementing counter measures

Discussion 0

Correct Answer: D Vote an answer

Question #8

CMM stands for?

A. Capable Mature Model

B. Capability Maturity Model

C. Capability Maturity Matrix

D. Capacity Maturity Matrix

Discussion 0

Correct Answer: B Vote an answer

Question #9

Below is Purpose of "Integrity", which is one of the Basic Components of Information Security

A. the property of being accessible and usable upon demand by an authorized entity.

B. the property that information is not made available or disclosed to unauthorized individuals

C. the property of safeguarding the accuracy and completeness of assets.

D. the property that information is not made available or disclosed to unauthorized individuals

Discussion 0

Correct Answer: C Vote an answer

Question #10

Integrity of data means

A. Data should be accessed by only the right people

B. Data should be viewable at all times

C. Accuracy and completeness of the data

Discussion 0

Correct Answer: C Vote an answer

Download Free GAQM ISO-ISMS-LA Demo

Simply submit your e-mail address below to get started with our free demo of your GAQM ISO-ISMS-LA exam.