Free GAQM ISO-27005-LRM Exam Questions
Absolute Free ISO-27005-LRM Exam Practice for Comprehensive Preparation
-
GAQM ISO-27005-LRM Exam Questions
-
Provided By: GAQM
- Exam: ISO/IEC 27005 - Certified Lead Risk Manager
- Certification: GAQM ISO
-
Total Questions: 796
-
Updated On: Jul 22, 2026
-
Rated: 4.9 |
-
Online Users: 1592
-
Question 1
-
An educational institution is adopting the NIST RMF for its student information system. They are in the process of authorizing the system for operation. What is the significance of this authorization step in the NIST RMF, and what should it involve for the student information system?
Answer: B
-
An educational institution is adopting the NIST RMF for its student information system. They are in the process of authorizing the system for operation. What is the significance of this authorization step in the NIST RMF, and what should it involve for the student information system?
-
Question 2
-
An organization identifies a high inherent risk of data breaches in its customer database. Despite implementing strong encryption and access controls, the residual risk is still above the organization's risk appetite. What should be the next course of action?
Answer: D
-
An organization identifies a high inherent risk of data breaches in its customer database. Despite implementing strong encryption and access controls, the residual risk is still above the organization's risk appetite. What should be the next course of action?
-
Question 3
-
A software company is expanding its operations globally and faces various information security risks associated with different regions. The CISO wants to utilize ISO/IEC 27005 to manage these risks effectively. How does the application of ISO/IEC 27005 specifically support the company in this global expansion in terms of risk management?
Answer: D
-
A software company is expanding its operations globally and faces various information security risks associated with different regions. The CISO wants to utilize ISO/IEC 27005 to manage these risks effectively. How does the application of ISO/IEC 27005 specifically support the company in this global expansion in terms of risk management?
-
Question 4
-
A university is facing risks associated with the unauthorized disclosure of confidential research data. They are considering encrypting all research data, restricting data access to a few key researchers, regularly auditing data access, or a combination of these measures. Which option aligns best with ISO/IEC 27005's guidance on proportionate and effective risk treatment?
Answer: B
-
A university is facing risks associated with the unauthorized disclosure of confidential research data. They are considering encrypting all research data, restricting data access to a few key researchers, regularly auditing data access, or a combination of these measures. Which option aligns best with ISO/IEC 27005's guidance on proportionate and effective risk treatment?
-
Question 5
-
A hospital's electronic health record (EHR) system is infected with ransomware, encrypting patient records. What is the primary consequence of this ransomware attack in terms of the CIA triad?
Answer: B
-
A hospital's electronic health record (EHR) system is infected with ransomware, encrypting patient records. What is the primary consequence of this ransomware attack in terms of the CIA triad?