ISO 27001 ISMS Lead Auditor Certification (PECB) Practice Test
Gana confianza para ISO 27001 ISMS Lead Auditor Certification (PECB). Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
Certificación de Auditor Líder ISO 27001 ISMS (PECB) Descripción: Certificación de auditor líder ISO 27001 que abarca sistemas de gestión de seguridad de la información, planificación de auditorías, ejecución de auditorías, informes y acciones correctivas.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
Aster Grid, an electric utility, outsourced SOC monitoring after a ransomware incident. During the ISO/IEC 27001 lead auditor engagement, the team is reviewing outsourcing responsibility. A cloud provider supplies encryption, but the customer configures access groups and retention. Which conclusion or next audit action is most appropriate?
Portwell Logistics, a shipping broker, opened three warehouse offices and connected them to the central ISMS. During the ISO/IEC 27001 lead auditor engagement, the team is reviewing outsourcing responsibility. A cloud provider supplies encryption, but the customer configures access groups and retention. Which conclusion or next audit action is most appropriate?
Orchid Foods, a food manufacturer, connected plant-floor systems to the enterprise network for predictive maintenance. During the ISO/IEC 27001 lead auditor engagement, the team is reviewing threat vulnerability risk. An analyst labels phishing, unpatched VPN firmware, and account takeover as the same risk. Which conclusion or next audit action is most appropriate?
Orchid Foods, a food manufacturer, connected plant-floor systems to the enterprise network for predictive maintenance. During the ISO/IEC 27001 lead auditor engagement, the team is reviewing stage 1 readiness. For an initial certification audit, policies exist but no internal audit or management review has occurred. Which conclusion or next audit action is most appropriate?
Portwell Logistics, a shipping broker, opened three warehouse offices and connected them to the central ISMS. During the ISO/IEC 27001 lead auditor engagement, the team is reviewing clause 8 risk assessment. Risk assessments were performed in 2023, but a 2025 acquisition added a customer portal and new processors. Which conclusion or next audit action is most appropriate?
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.
01Conducting an ISO/IEC 27001 audit
This domain deals with conducting an ISO/IEC 27001 audit effectively, emphasizing the execution of structured audit procedures, interviews, observation techniques, and the gathering of valid objective audit evidence during the onsite review phase.
02Fundamental audit concepts and principles
This domain addresses audit concepts and principles important for professional evaluators, ensuring candidates understand the overarching theories, behaviors, and guidelines governing systematic management system reviews and ongoing compliance.
03Fundamental principles and concepts of an information security management system (ISMS)
This domain covers the fundamental principles and concepts of an information security management system, establishing a clear understanding of core security frameworks required for effective auditing practices during professional evaluations.
04Preparing an ISO/IEC 27001 audit
This domain involves preparing an ISO/IEC 27001 audit directly, detailing the necessary logistical steps, document evaluations, and strategic planning required before arriving on-site or initiating remote assessments for the organization.
05Information security management system (ISMS) and ISO/IEC 27001 requirements
This specific domain focuses completely on information security management system structures and the compliance requirements outlined within the international ISO/IEC 27001 standard for organizational security governance and daily operational management.
06Managing an ISO/IEC 27001 audit program
This domain explains managing an ISO/IEC 27001 audit program fully, addressing continuous oversight, scheduling, resource allocation, and maintaining overall quality assurance across multiple organizational audit cycles to satisfy standard criteria.
07Closing an ISO/IEC 27001 audit
This domain covers closing an ISO/IEC 27001 audit successfully, guiding professionals through compiling audit findings, drafting clear nonconformity reports, holding closing meetings, and executing final audit closure activities with the client organization.