Discuss PECB ISO-IEC-27001-Lead-Implementer Exam Topic 3 Question 24

A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

AIf the risk analysis has not been carried out.

BWhen computer systems are kept in a cellar below ground level.

CWhen the computer systems are not insured.

DWhen the organization is located near a river.

Suggested Answer: B

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Gertude 11 months ago

C is a good point, but insurance doesn’t stop the flood.

Aileen 11 months ago

Totally agree with B, water and electronics don’t mix!

Fletcher 12 months ago

Wait, is it really always a threat? Sounds a bit extreme.

Sabina 12 months ago

I think D makes sense too, rivers can overflow.

Lilli 12 months ago

Definitely B, basements are a flood risk!

Wenona 1 year ago

I feel like option D is the strongest choice here. If you're near a river, floods are just a part of the risk landscape, right?

Graciela 1 year ago

I think I saw a practice question about risk analysis, and it mentioned that not doing one could lead to overlooking threats. So maybe A is a possibility?

Tamra 1 year ago

I'm not entirely sure, but I feel like option B could be relevant too. If systems are in a cellar, they might be more vulnerable to flooding.

Audra 1 year ago

I remember discussing how location can really impact risk, so I think option D makes sense since being near a river could definitely increase flood risk.

Elinore 1 year ago

Okay, let's see. The question says we need to create a forecast, and the options are Account, Lead, Quote, and Opportunity. Based on my understanding, Opportunities are the best fit for forecasting sales, so I'll go with that.

Gladys 1 year ago

This is a tricky one, but I think the Information Model is the best fit based on the description. It's all about the core data elements and how they're connected, which seems to match what the question is asking for.

Leonor 1 year ago

Providing regular communication to risk managers is important, but I don't think it's the most effective way to create broad risk awareness. I'm leaning more towards the option about senior management commitment.

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 3 Question 24 Discussion