Free LEAD-IMPLEMENTER Pecb LEAD-IMPLEMENTER Practice Test Question - Page 2

Question 4 (Topic 1)

Based on scenario 8, did the nonconformity report include all the necessary aspects?

Select an option, then click Submit answer.

○ Yes, the report included all the necessary aspects
○ No, the report must also specify the root cause of the nonconformity
○ No, the report must also specify the audit criteria

Reference / correct answer:

No, the report must also specify the audit criteria

Most accepted answer: C. No, the report must also specify the audit criteria

Community votes: A=1, B=1, C=3

Selected Answer: C In ISO/IEC 27001 (and ISO 19011 auditing practice), a nonconformity report (NCR) must clearly contain: - The audit criteria that were violated - The nonconforming situation (what was found) - The evidence supporting it What does NOT belong inside the NCR itself? - Root cause analysis -> that comes later, as part of corrective action, not the NCR. upvoted 1 times

Selected Answer: C Specifying the root cause of the nonconformity in the report is helpful but not strictly required by ISO/IEC 27001 internal audit clauses. Therefore, the correct answer is: C. No, the report must also specify the audit criteria This aligns with ISO 27001 Clause 9.2 requirements that internal audit findings and reports should reference the audit criteria, scope, and standards used for the audit in order to clearly justify nonconformities and enable appropriate corrective actions upvoted 1 times

Selected Answer: B For a nonconformity report to be complete under ISO/IEC 27001 (especially in Clause 10.1 – Nonconformity and corrective action upvoted 1 times

Selected Answer: C An adequate documentation of a nonconformity includes three items: 1. Audit Criteria 2. Observed Nonconformity 3. Whether it is a major/minor Nonconformity upvoted 2 times

Selected Answer: A I think it should be A upvoted 1 times

Question 5 (Topic 1)

Which of the following is the information security committee responsible for?

Select an option, then click Submit answer.

○ Ensure smooth running of the ISMS
○ Set annual objectives and the ISMS strategy
○ Treat the nonconformities

Question 6 (Topic 1)

Which situation described in scenario 15 indicates that Texas H&H Inc. implemented a detective control?

Select an option, then click Submit answer.

○ Texas H&H Inc integrated the incident management policy in its information security policy
○ Texas H&H Inc. tested its system for malicious activity and checked cloud-based email settings
○ Texas H&H Inc. hired an expert to conduct a forensic analysis

Free LEAD-IMPLEMENTER – Pecb LEAD-IMPLEMENTER Practice Test Question