Free PECB Lead-Cybersecurity-Manager Exam Questions

Try our Free Demo Practice Tests for Comprehensive Lead-Cybersecurity-Manager Exam Preparation

  • PECB Lead-Cybersecurity-Manager Exam Questions
  • Provided By: PECB
  • Exam: ISO/IEC 27032 Lead Cybersecurity Manager
  • Certification: PECB Auditor
  • Total Questions: 80
  • Updated On: Mar 26, 2025
  • Rated: 4.9 |
  • Online Users: 160
Page No. 1 of 16
Add To Cart
  • Question 1
    • Which of the following examples is NOT a principle of COBIT 2019? 

      Answer: C
  • Question 2
    • Scenario 5:Pilotron is a large manufacturer known for its electric vehicles that use renewable energy. One of

      Its objectives Is 10 make the world a cleaner place by reducing the consumption of fossil fuels. In addition to

      electric vehicles, Pilotron also offers solar roof and advanced battery technology, all manufactured at its

      factory in Bastogne. Belgium. As one of the most Innovative manufacturers in Europe, Pilotron invests heavily

      in research and development to create unique components, such as motors, sensors, and batteries. In addillon,

      it places a strong emphasis on delivering high-quality products, and requires all employees to undergo an

      intensive onboarding program that includes hands-on training.

      Pilotron did not prioritize the establishment of a cybersecurity program to protect its information. This became

      evident when a frustrated employee took advantage of the company's lack of cybersecurity measures. The

      employee was aware that Pilotron's existing security measures could easily be evaded The company became

      aware of the incident after five weeks, when a sudden surge in network data transfer raised suspicions upon

      investigation. Pilotron discovered that the employee had multiple requests for access to software development

      resources that were unrelated to their daily tasks By using a false user name and avoiding the implemented

      cybersecurity controls, the employee directly modified the code of one of Pilotron's products. This

      unauthorized code change enabled the employee to transfer highly sensitive data to external parties

      Knowing that insider threats pose a significant risk and the existing security controls were ineffective. Pilotron

      decided to shift its cybersecurity focus toward proactive detection and prevention strategies. It implemented a

      security software that detects unusual access patterns, large data upload, and credential abuse Additionally,

      Pilotron recognized the need to help improve the security of Its systems by Isolating devices (PCs. servers) on

      the opposite sides of a firewall.

      The company also implemented an identity management solution to ensure the verification of Individuals

      requesting access. It decided to implement a mechanism that ensured only authorized individuals can access

      sensitive systems and data. In addition to the traditional username and password, employees were now

      required to provide a unique personal identifier, such as a fingerprint, as well as a one-time verification code

      generated through a mobile app

      Moreover, in order to enhance security measures and gain the benefits of cloud computing, Pilotron decided to

      leverage cloud based services. A kiv factor in Pilotroo's decision was the capability to construct and oversee its

      personalized Infrastructure Instead of depending on pre-set platforms or software applications, the company could craft its virtualized environments. The significant level of customization is of utmost importance to

      Pilotron since it enables adjusting its infrastructure to align with the specific requirements of its projects and

      clients.

      Based on the scenario above, answer the following question:

      Based on scenario 5,whirl cloud service model did Pilotron decide 10 use?


      Answer: C
  • Question 3
    • According to the NIST Cyber security Framework, which of the following steps involves Identifying related systems and assets, regulatory requirements, and the overall risk approach?


      Answer: B
  • Question 4
    • Scenario 9:FuroDart ts a leading retail company that operates across Europe With over 5Q0 stores In several countries, EuroDart offers an extensive selection of products, including clothing, electronics, home appliances, and groceries. The company's success stems from its commitment to providing its customers with exceptional support and shopping experience.Due to the growing threats In the digital landscape. EutoDart puls a lot of efforts in ensuring cybersecurity.

      The company understands the Importance of safeguarding customer data, protecting Its infrastructure, and

      maintaining a powerful defense against cyberattacks. As such, EuroDart has Implemented robust cybersecurity

      measures 10 ensure the confidentiality, integrity, and availability of its systems and data

      EuroDart regularly conducts comprehensive testing to enhance its cybersecurity posture. Following a standard

      methodology as a reference for security testing, the company performs security tests on high-risk assets,

      utilizing its own data classification scheme. Security tests are conducted regularly on various components,

      such as applications and databases, to ensure their reliability and integrity.

      As part of these activities. EuroDart engages experienced ethical hackers to simulate real-world attacks on its

      network and applications. The purpose of such activities is to identify potential weaknesses and exploit them

      within a controlled environment to evaluate the effectiveness of existing security measures. EuroDart utilizes a

      security information and event management (SIEM) system to centralize log data from various sources within

      the network and have a customizable view for comprehending and reporting Incidents promptly and without

      delay The SiEM system enables the company to increase productivity and efficiency by collecting, analyzing,

      and correlating realtime data. The company leverages different dashboards to report on monitoring and

      measurement activities that are more tied to specific controls or processes. These dashboards enable the

      company to measure the progress of its short-term objectives.

      EuroDart recognizes that the cybersecurity program needs to be maintained and updated periodically. The

      company ensures that the cybersecurity manager is notified regarding any agreed actions to be taken. In

      addition, EuroDart regularly reviews and updates its cybersecurity policies, procedures, and controls. The

      company maintains accurate and comprehensive documentation of its cybersecurity practices including

      cybersecurity policy, cybersecurity objectives and targets, risk analysis, incident management, and business

      continuity plans, based on different factors of change, such as organizational changes, changes in the business

      scope, incidents, failures, test results, or faulty operations. Regular updates of these documents also help

      ensure that employees are aware of their roles and responsibilities in maintaining a secure environment.

      According to scenario 9. whichtype of dashboards does EuroDartemploy?


      Answer: A
  • Question 5
    • What is a single sign-on (SSO)? 

      Answer: A
PAGE: 1 - 16
Add To Cart

© Copyrights Dumpscity 2025. All Rights Reserved

We use cookies to ensure your best experience. So we hope you are happy to receive all cookies on the Dumpscity.