ISO 27001 ISMS Lead Implementer Certification (PECB) Practice Test
Gana confianza para ISO 27001 ISMS Lead Implementer Certification (PECB). Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
Certificación ISO 27001 ISMS Lead Implementer (PECB) Descripción: Certificación de implementador líder ISO 27001 que abarca el diseño de ISMS, evaluación de riesgos, implementación de controles de seguridad y procesos de mejora continua.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
A university research center handles sponsored research data and student records. A grant audit is due in July, two labs use personal cloud storage, and campus parking changes are unrelated noise. During the internal audit planning session, a finding shows the same access review failure in four departments, but each is reported as a separate minor nonconformity with no trend analysis. The lead implementer must recommend the next defensible action before audit committee update. Which option best fits ISO/IEC 27001:2022 implementation practice?
A regional insurer with 1,800 employees is replacing a legacy claims platform. The project is six weeks behind, the privacy officer is focused on a new state rule, and the CIO mentions that the cafeteria Wi-Fi was upgraded last month. During the implementation planning workshop, KPI owners report 100 percent policy publication but employees still use unapproved templates in procurement. The lead implementer must recommend the next defensible action before the next steering committee meeting. Which option best fits ISO/IEC 27001:2022 implementation practice?
A fintech start-up is scaling from 90 to 260 employees after a funding round. The CTO wants lightweight controls, the legal team is negotiating enterprise customers, and office seating changes are distracting managers. During the ISMS project planning meeting, the IT team wants to exclude supplier monitoring because the cloud provider has an ISO/IEC 27001 certificate. The lead implementer must recommend the next defensible action before customer due-diligence response. Which option best fits ISO/IEC 27001:2022 implementation practice?
A logistics provider is integrating a recently acquired warehouse management system. The acquisition brought three suppliers, night-shift supervisors use local spreadsheets, and a fleet fuel contract is being renegotiated. During the control implementation review, a newly acquired subsidiary uses different risk scales and wants to keep them until after the certification audit to avoid delaying integration. The lead implementer must recommend the next defensible action before certification readiness gate. Which option best fits ISO/IEC 27001:2022 implementation practice?
A public cloud customer is moving its customer portal from virtual machines to managed containers. Developers want faster releases, the provider has several certifications, and the office lease renewal is unrelated. During the change risk review, a fintech team rates a data integrity risk as low because no personal data would be disclosed, although payment balances could be altered for four hours. The lead implementer must recommend the next defensible action before production release window. Which option best fits ISO/IEC 27001:2022 implementation practice?
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.
01Planning of an ISMS implementation based on ISO/IEC 27001
Representing the largest share at 22.5%, this domain focuses on risk assessment methodologies, risk treatment planning, Statement of Applicability development, and resource allocation needed to establish a functional security management system.
02Fundamental principles and concepts of an information security management system
Accounting for 18.75% of the exam, this domain covers core definitions, information security principles, and management system structures. Candidates review governance models, information security objectives, and the basic framework of ISO/IEC 27001.
03Implementation of an ISMS based on ISO/IEC 27001
Holding a 17.5% exam weight, this domain covers deploying security policies, rolling out controls, managing security awareness programs, operational workflows, and coordinating incident response processes across organizational business units.
04Information security management system requirements
Accounting for 15.0% of the exam, this domain addresses specific ISO/IEC 27001 clauses. Focus areas include organizational context, leadership commitments, scope determination, and mandatory documentation required to demonstrate compliance with standard requirements.
05Monitoring and measurement of an ISMS based on ISO/IEC 27001
At 12.5% of the exam, this domain addresses performance metrics, internal audit programs, monitoring techniques, and management reviews to confirm operational effectiveness and verify alignment with security targets.
06Continual improvement of an ISMS based on ISO/IEC 27001
Weighted at 7.5%, this domain details methods for identifying and resolving nonconformities, executing corrective actions, and refining management system operations over time to respond to organizational changes and security developments.
07Preparation for an ISMS certification audit
Carrying a 6.25% weight, this domain focuses on organizing documentation, coordinating with external certification bodies, managing Stage 1 and Stage 2 audit activities, and addressing findings identified by independent auditors.