Free Practice GAQM ISO-27005-LRM Exam Questions 2025

Stay ahead with 100% Free ISO/IEC 27005 - Certified Lead Risk Manager ISO-27005-LRM Dumps Practice Questions

Page: 1 / 160

Total 796 Questions | Updated On: Apr 10, 2025

Add To Cart

Question 1

An organization is conducting a risk assessment following the ISO/IEC 27005 standard. They are currently identifying potential threats and vulnerabilities that could affect their information systems. What stage of the risk management process is the organization currently in?

A : Risk Evaluation

B : Risk Identification

C : Risk Communication

D : Risk Treatment

Answer: B

Question 2

A hospital's electronic health record (EHR) system is infected with ransomware, encrypting patient records. What is the primary consequence of this ransomware attack in terms of the CIA triad?

A : Financial losses due to paying the ransom.

B : Loss of availability of patient records for healthcare providers.

C : Unauthorized disclosure of patient health information.

D : Permanent deletion of patient records, impacting data integrity.

Answer: B

Question 3

A hospital's electronic health record (EHR) system is infected with ransomware, encrypting patient records. What is the primary consequence of this ransomware attack in terms of the CIA triad?

A : Financial losses due to paying the ransom.

B : Loss of availability of patient records for healthcare providers.

C : Unauthorized disclosure of patient health information.

D : Permanent deletion of patient records, impacting data integrity.

Answer: B

Question 4

An IT service provider is monitoring and reviewing its risk management process. What is the primary objective of this stage according to ISO/IEC 27005?

A : Focusing exclusively on external audits without internal evaluations.

B : Completely discontinuing the risk management process after initial implementation.

C : Assuming that the implemented risk controls will remain effective indefinitely without further review.

D : Regularly assessing the effectiveness of the risk management process and making improvements as necessary.

Answer: D

Question 5

A financial services firm is updating its cybersecurity policies. The risk manager must communicate these changes to all employees to ensure compliance and awareness of new security protocols. What should be the primary objective of this risk communication?

A : To focus solely on the penalties for non-compliance with the new policies.

B : To ensure employees understand how the policy changes affect their day-to-day activities.

C : To provide a high-level overview of the policy changes without details.

D : To inform employees about the technical aspects of the new cybersecurity policies.

Answer: B

Page: 1 / 160

Total 796 Questions | Updated On: Apr 10, 2025

Add To Cart