PECB Lead Implementer - PECB Certified ISO/IEC 27001 Lead Implementer Exam

Page:    1 / 27   
Total 135 questions

Scenario 1: HealthGenic is a pediatric clinic that monitors the health and growth of individuals from infancy to early adulthood using a web-based medical software. The software is also used to schedule appointments, create customized medical reports, store patients’ data and medical history, and communicate with all the involved parties, including parents, other physicians, and the medical laboratory staff.
Last month, HealthGenic experienced a number of service interruptions due to the increased number of users accessing the software. Another issue the company faced while using the software was the complicated user interface, which the untrained personnel found challenging to use.
The top management of HealthGenic immediately informed the company that had developed the software about the issue. The software company fixed the issue; however, in the process of doing so, it modified some files that comprised sensitive information related to HealthGenic’s patients. The modifications that were made resulted in incomplete and incorrect medical reports and, more importantly, invaded the patients’ privacy.
Based on the scenario above, answer the following question:
Which of the following indicates that the confidentiality of information was compromised?

  • A. Service interruptions due to the increased number of users
  • B. Invasion of patients’ privacy
  • C. Modification of patients’ medical reports


Answer : B

Based on scenario 1, what is a potential impact of the loss of integrity of information in HealthGenic?

  • A. Disruption of operations and performance degradation
  • B. Incomplete and incorrect medical reports
  • C. Service interruptions and complicated user interface


Answer : B

Intrinsic vulnerabilities, such as the _____________, are related to the characteristics of the asset. Refer to scenario 1.

  • A. Software malfunction
  • B. Service interruptions
  • C. Complicated user interface


Answer : C

Which situation described in scenario 1 represents a threat to HealthGenic?

  • A. HealthGenic did not train its personnel to use the software
  • B. The software company modified information related to HealthGenic’s patients
  • C. HealthGenic used a web-based medical software for storing patients' confidential information


Answer : B

In scenario 1, HealthGenic experienced a number of service interruptions due to the loss of functionality of the software. Which principle of information security has been affected in this case?

  • A. Availability
  • B. Confidentiality
  • C. Integrity


Answer : A

Page:    1 / 27   
Total 135 questions