Biography

ISO-IEC-27001-Lead-Auditor Valid Study Guide | Latest ISO-IEC-27001-Lead-Auditor Study Guide

BTW, DOWNLOAD part of Lead2PassExam ISO-IEC-27001-Lead-Auditor dumps from Cloud Storage: https://drive.google.com/open?id=1MBSBOTOzKNwlxnHTrYQsGNym-i3G7eXe

Once you browser our official websites, you are bound to love our ISO-IEC-27001-Lead-Auditor practice questions. All our ISO-IEC-27001-Lead-Auditor study materials are displayed orderly on the web page. Also, you just need to click one kind; then you can know much about it. There have detailed introductions about the ISO-IEC-27001-Lead-Auditor learnign braindumps such as price, version, free demo and so on. As long as you click on it, all the information will show up right away. It is quite convenient.

PECB ISO-IEC-27001-Lead-Auditor (PECB Certified ISO/IEC 27001 Lead Auditor) Exam is a globally recognized certification program designed for professionals who want to demonstrate their knowledge and expertise in leading and conducting information security management system (ISMS) audits based on the ISO/IEC 27001 standard. ISO-IEC-27001-Lead-Auditor exam is designed to assess the candidate's understanding of the key concepts, principles, and best practices of information security management and auditing, as well as their ability to plan, execute, and report on ISMS audits in accordance with international standards.

The ISO/IEC 27001 standard is an internationally recognized framework that provides a systematic approach to managing and protecting sensitive information. The standard outlines best practices for implementing an ISMS, which is a set of policies, procedures, and processes that manage information risks, ensure confidentiality, integrity, and availability of information. The ISO/IEC 27001 lead auditor certification validates a professional's ability to audit and assess an organization's ISMS based on the ISO/IEC 27001 standard.

>> ISO-IEC-27001-Lead-Auditor Valid Study Guide <<

Authoritative ISO-IEC-27001-Lead-Auditor Valid Study Guide Covers the Entire Syllabus of ISO-IEC-27001-Lead-Auditor

Lead2PassExam provides numerous extra features to help you succeed on the ISO-IEC-27001-Lead-Auditor exam, in addition to the PECB ISO-IEC-27001-Lead-Auditor exam questions in PDF format and online practice test engine. These include 100% real questions and accurate answers, 1 year of free updates, a free demo of the PECB ISO-IEC-27001-Lead-Auditor Exam Questions, a money-back guarantee in the event of failure, and a 20% discount. Lead2PassExam is the ideal alternative for your PECB Certified ISO/IEC 27001 Lead Auditor exam (ISO-IEC-27001-Lead-Auditor) test preparation because it combines all of these elements.

PECB Certified ISO/IEC 27001 Lead Auditor exam Sample Questions (Q349-Q354):

NEW QUESTION # 349
You are performing an ISMS initial certification audit at a residential nursing home that provides healthcare services. The next step in your audit plan is to conduct the closing meeting. During the final audit team meeting, as an audit team leader, you agree to report 2 minor nonconformities and 1 opportunity for improvement as below:

Select one option of the recommendation to the audit programme manager you are going to advise to the auditee at the closing meeting.

• A. Recommend that an unannounced audit is carried out at a future date
• B. Recommend that a full scope re-audit is required within 6 months
• C. Recommend certification after your approval of the proposed corrective action plan Recommend that the findings can be closed out at a surveillance audit in 1 year
• D. Recommend certification immediately
• E. Recommend that a partial audit is required within 3 months

Answer: C

Explanation:
According to ISO/IEC 17021-1:2015, which specifies the requirements for bodies providing audit and certification of management systems, clause 9.4.9 requires the certification body to make a certification decision based on the information obtained during the audit and any other relevant information1. The certification body should also consider the effectiveness of the corrective actions taken by the auditee to address any nonconformities identified during the audit1. Therefore, when making a recommendation to the audit programme manager, an ISMS auditor should consider the nature and severity of the nonconformities and the proposed corrective actions.
Based on the scenario above, the auditor should recommend certification after their approval of the proposed corrective action plan and recommend that the findings can be closed out at a surveillance audit in 1 year. The auditor should provide the following justification for their recommendation:
* Justification: This recommendation is appropriate because it reflects the fact that the auditee has only two minor nonconformities and one opportunity for improvement, which do not indicate a significant or systemic failure of their ISMS. A minor nonconformity is defined as a failure to achieve one or more requirements of ISO/IEC 27001:2022 or a situation which raises significant doubt about the ability of an ISMS process to achieve its intended output, but does not affect its overall effectiveness or conformity2. An opportunity for improvement is defined as a suggestion for improvement beyond what is required by ISO/IEC 27001:20222. Therefore, these findings do not prevent or preclude certification, as long as they are addressed by appropriate corrective actions within a reasonable time frame. The auditor should approve the proposed corrective action plan before recommending certification, to ensure that it is realistic, achievable, and effective. The auditor should also recommend that the findings can be closed out at a surveillance audit in 1 year, to verify that the corrective actions have been implemented and are working as intended.
The other options are not valid recommendations for the audit programme manager, as they are either too lenient or too strict for the given scenario. For example:
* Recommend certification immediately: This option is not valid because it implies that the auditor ignores or accepts the nonconformities, which is contrary to the audit principles and objectives of ISO
19011:20182, which provides guidelines for auditing management systems. It also contradicts the requirement of ISO/IEC 17021-1:20151, which requires the certification body to consider the effectiveness of the corrective actions taken by the auditee before making a certification decision.
* Recommend that a full scope re-audit is required within 6 months: This option is not valid because it implies that the auditor overreacts or exaggerates the nonconformities, which is contrary to the audit principles and objectives of ISO 19011:20182. It also contradicts the requirement of ISO/IEC
17021-1:20151, which requires the certification body to determine whether a re-audit is necessary based on the nature and extent of nonconformities and other relevant factors. A full scope re-audit is usually reserved for major nonconformities or multiple minor nonconformities that indicate a serious or widespread failure of an ISMS.
* Recommend that an unannounced audit is carried out at a future date: This option is not valid because it implies that the auditor distrusts or doubts the auditee's commitment or capability to implement corrective actions, which is contrary to the audit principles and objectives of ISO 19011:20182. It also contradicts the requirement of ISO/IEC 17021-1:20151, which requires the certification body to conduct unannounced audits only under certain conditions, such as when there are indications of serious problems with an ISMS or when required by sector-specific schemes.
* Recommend that a partial audit is required within 3 months: This option is not valid because it implies that the auditor imposes or prescribes a specific time frame or scope for verifying corrective actions, which is contrary to the audit principles and objectives of ISO 19011:20182. It also contradicts the requirement of ISO/IEC 17021-1:20151, which requires the certification body to determine whether a partial audit is necessary based on the nature and extent of nonconformities and other relevant factors. A partial audit may be appropriate for minor nonconformities, but the time frame and scope should be agreed upon with the auditee and based on the proposed corrective action plan.
References: ISO/IEC 17021-1:2015 - Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 1: Requirements, ISO 19011:2018 - Guidelines for auditing management systems

 

NEW QUESTION # 350
Which one of the following conclusions in the audit report is not required by the certification body when deciding to grant certification?

• A. The plans to address corrective actions related to minor nonconformities have been accepted
• B. The scope of certification has been fulfilled
• C. The organisation fully complies with all legal and other requirements applicable to the Information Security Management System.
• D. The corrections taken by the organisation related to major nonconformities have been accepted.

Answer: C

Explanation:
The conclusion in the audit report that is not required by the certification body when deciding to grant certification is that the organisation fully complies with all legal and other requirements applicable to the ISMS. This is because the certification body does not have the authority or the responsibility to verify the legal compliance of the organisation, as this is outside the scope of ISO/IEC 27001:2022. The certification body only evaluates the conformity of the organisation's ISMS with the requirements of the standard, which include the establishment of a process to identify and evaluate the legal and other requirements that are relevant to the ISMS. The organisation is responsible for ensuring its own legal compliance and for providing evidence of such compliance to the certification body if requested. References: = ISO/IEC 27001:2022, clause
6.1.3; ISO/IEC 27006:2022, clause 9.2.2.4; PECB Candidate Handbook ISO 27001 Lead Auditor, page 29.

 

NEW QUESTION # 351
Scenario 9: UpNet, a networking company, has been certified against ISO/IEC 27001. It provides network security, virtualization, cloud computing, network hardware, network management software, and networking technologies.
The company's recognition has increased drastically since gaining ISO/IEC 27001 certification. The certification confirmed the maturity of UpNefs operations and its compliance with a widely recognized and accepted standard.
But not everything ended after the certification. UpNet continually reviewed and enhanced its security controls and the overall effectiveness and efficiency of the ISMS by conducting internal audits. The top management was not willing to employ a full-time team of internal auditors, so they decided to outsource the internal audit function. This form of internal audits ensured independence, objectivity, and that they had an advisory role about the continual improvement of the ISMS.
Not long after the initial certification audit, the company created a new department specialized in data and storage products. They offered routers and switches optimized for data centers and software-based networking devices, such as network virtualization and network security appliances. This caused changes to the operations of the other departments already covered in the ISMS certification scope.
Therefore. UpNet initiated a risk assessment process and an internal audit. Following the internal audit result, the company confirmed the effectiveness and efficiency of the existing and new processes and controls.
The top management decided to include the new department in the certification scope since it complies with ISO/IEC 27001 requirements. UpNet announced that it is ISO/IEC 27001 certified and the certification scope encompasses the whole company.
One year after the initial certification audit, the certification body conducted another audit of UpNefs ISMS. This audit aimed to determine the UpNefs ISMS fulfillment of specified ISO/IEC 27001 requirements and ensure that the ISMS is being continually improved. The audit team confirmed that the certified ISMS continues to fulfill the requirements of the standard. Nonetheless, the new department caused a significant impact on governing the management system. Moreover, the certification body was not informed about any changes. Thus, the UpNefs certification was suspended.
Based on the scenario above, answer the following question:
What type of audit is illustrated in the last paragraph of scenario 9?

• A. Surveillance audit
• B. Internal audit
• C. Recertification audit

Answer: A

 

NEW QUESTION # 352
Your organisation is currently seeking ISO/IEC27001:2022 certification. You have just qualified as an Internal ISMS auditor and the ICT Manager wants to use your newly acquired knowledge to assist him with the design of an information security incident management process.
He identifies the following stages in his planned process and asks you to confirm which order they should appear in.

Answer:

Explanation:

Explanation:
Step 1 = Incident logging Step 2 = Incident categorisation Step 3 = Incident prioritisation Step 4 = Incident assignment Step 5 = Task creation and management Step 6 = SLA management and escalation Step 7 = Incident resolution Step 8 = Incident closure The order of the stages in the information security incident management process should follow a logical sequence that ensures a quick, effective, and orderly response to the incidents, events, and weaknesses. The order should also be consistent with the best practices and guidance provided by ISO/IEC 27001:2022 and ISO/IEC 27035:2022. Therefore, the following order is suggested:
* Step 1 = Incident logging: This step involves recording the details of the potential incident, event, or weakness, such as the date, time, source, description, impact, and reporter. This step is important to provide a traceable record of the incident and to facilitate the subsequent analysis and response. This step is related to control A.16.1.1 of ISO/IEC 27001:2022, which requires the organization to establish responsibilities and procedures for the management of information security incidents, events, and weaknesses. This step is also related to clause 6.2 of ISO/IEC 27035:2022, which provides guidance on how to log the incidents, events, and weaknesses.
* Step 2 = Incident categorisation: This step involves determining the type and nature of the incident, event, or weakness, such as whether it is a hardware issue, network issue, or software issue. This step is important to classify the incident and to assign it to the appropriate resolver or team. This step is related to control A.16.1.2 of ISO/IEC 27001:2022, which requires the organization to report information
* security events and weaknesses as quickly as possible through appropriate management channels. This step is also related to clause 6.3 of ISO/IEC 27035:2022, which provides guidance on how to categorize the incidents, events, and weaknesses.
* Step 3 = Incident prioritisation: This step involves assessing the severity and urgency of the incident, event, or weakness, and classifying it as critical, high, medium, or low. This step is important to prioritize the incident and to allocate the necessary resources and time for the response. This step is related to control A.16.1.3 of ISO/IEC 27001:2022, which requires the organization to assess and prioritize information security events and weaknesses in accordance with the defined criteria. This step is also related to clause 6.4 of ISO/IEC 27035:2022, which provides guidance on how to prioritize the incidents, events, and weaknesses.
* Step 4 = Incident assignment: This step involves passing the incident, event, or weakness to the individual or team who is best suited to resolve it, based on their skills, knowledge, and availability.
This step is important to ensure that the incident is handled by the right person or team and to avoid delays or confusion. This step is related to control A.16.1.4 of ISO/IEC 27001:2022, which requires the organization to respond to information security events and weaknesses in a timely manner, according to the agreed procedures. This step is also related to clause 6.5 of ISO/IEC 27035:2022, which provides guidance on how to assign the incidents, events, and weaknesses.
* Step 5 = Task creation and management: This step involves identifying and coordinating the work needed to resolve the incident, event, or weakness, such as performing root cause analysis, testing solutions, implementing changes, and documenting actions. This step is important to ensure that the incident is resolved effectively and efficiently, and that the actions are tracked and controlled. This step is related to control A.16.1.5 of ISO/IEC 27001:2022, which requires the organization to apply lessons learned from information security events and weaknesses to take corrective and preventive actions. This step is also related to clause 6.6 of ISO/IEC 27035:2022, which provides guidance on how to create and manage the tasks for the incidents, events, and weaknesses.
* Step 6 = SLA management and escalation: This step involves ensuring that any service level agreements (SLAs) are adhered to while the resolution is being implemented, and that the incident is escalated to a higher level of authority or support if a breach looks likely or occurs. This step is important to ensure that the incident is resolved within the agreed time frame and quality, and that any deviations or issues are communicated and addressed. This step is related to control A.16.1.6 of ISO/IEC 27001:2022, which requires the organization to communicate information security events and weaknesses to the relevant internal and external parties, as appropriate. This step is also related to clause 6.7 of ISO/IEC
27035:2022, which provides guidance on how to manage the SLAs and escalations for the incidents, events, and weaknesses.
* Step 7 = Incident resolution: This step involves applying a temporary workaround or a permanent solution to resolve the incident, event, or weakness, and restoring the normal operation of the information and information processing facilities. This step is important to ensure that the incident is resolved completely and satisfactorily, and that the information security is restored to the desired level.
This step is related to control A.16.1.7 of ISO/IEC 27001:2022, which requires the organization to identify the cause of information security events and weaknesses, and to take actions to prevent their recurrence or occurrence. This step is also related to clause 6.8 of ISO/IEC 27035:2022, which provides guidance on how to resolve the incidents, events, and weaknesses.
* Step 8 = Incident closure: This step involves closing the incident, event, or weakness, after verifying that it has been resolved satisfactorily, and that all the actions have been completed and documented.
This step is important to ensure that the incident is formally closed and that no further actions are
* required. This step is related to control A.16.1.8 of ISO/IEC 27001:2022, which requires the organization to collect evidence and document the information security events and weaknesses, and the actions taken. This step is also related to clause 6.9 of ISO/IEC 27035:2022, which provides guidance on how to close the incidents, events, and weaknesses.
References:
* ISO/IEC 27001:2022, Information technology - Security techniques - Information security management systems - Requirements1
* PECB Candidate Handbook ISO/IEC 27001 Lead Auditor2
* ISO 27001:2022 Lead Auditor - PECB3
* ISO 27001:2022 certified ISMS lead auditor - Jisc4
* ISO/IEC 27001:2022 Lead Auditor Transition Training Course5
* ISO 27001 - Information Security Lead Auditor Course - PwC Training Academy6
* ISO/IEC 27035:2022, Information technology - Security techniques - Information security incident management

 

NEW QUESTION # 353
You are conducting an ISMS audit in the despatch department of an international logistics organisation that provides shipping services to large organisations including local hospitals and government offices. Parcels typically contain pharmaceutical products, biological samples, and documents such as passports and driving licences. You note that the company records show a very large number of returned items with causes including misaddressed labels and, in 15% of cases, two or more labels for different addresses for the one package. You are interviewing the Shipping Manager (SM).
You: Are items checked before being dispatched?
SM: Any obviously damaged items are removed by the duty staff before being dispatched, but the small profit margin makes it uneconomic to implement a formal checking process.
You: What action is taken when items are returned?
SM: Most of these contracts are relatively low value, therefore it has been decided that it is easier and more convenient to simply reprint the label and re-send individual parcels than it is to implement an investigation.
You raise a nonconformity. Referencing the scenario, which three of the following Annex A controls would you expect the auditee to have implemented when you conduct the follow-up audit?

• A. 6.4 Disciplinary process
• B. 5.34 Privacy and protection of personal identifiable information (PII)
• C. 6.3 Information security awareness, education, and training
• D. 5.3 Segregation of duties
• E. 5.32 Intellectual property rights
• F. 5.13 Labelling of information
• G. 5.11 Return of assets
• H. 5.6 Contact with special interest groups

Answer: B,C,F

Explanation:
The three Annex A controls that you would expect the auditee to have implemented when you conduct the follow-up audit are:
* B. 5.13 Labelling of information
* E. 5.34 Privacy and protection of personal identifiable information (PII)
* G. 6.3 Information security awareness, education, and training
* B. This control requires the organisation to label information assets in accordance with the information classification scheme, and to handle them accordingly12. This control is relevant for the auditee because it could help them to avoid misaddressing labels and sending parcels to wrong destinations, which could compromise the confidentiality, integrity, and availability of the information assets. By labelling the information assets correctly, the auditee could also ensure that they are delivered to the intended recipients and that they are protected from unauthorized access, use, or disclosure.
* E. This control requires the organisation to protect the privacy and the rights of individuals whose personal identifiable information (PII) is processed by the organisation, and to comply with the applicable legal and contractual obligations13. This control is relevant for the auditee because it could help them to prevent the unauthorized use of residents' personal data by a supplier, which could violate the privacy and the rights of the residents and their family members, and expose the auditee to legal and reputational risks. By protecting the PII of the residents and their family members, the auditee could also enhance their trust and satisfaction, and avoid complaints and disputes.
* G. This control requires the organisation to ensure that all employees and contractors are aware of the information security policy, their roles and responsibilities, and the relevant information security procedures and controls14. This control is relevant for the auditee because it could help them to improve the information security culture and behaviour of their staff, and to reduce the human errors and negligence that could lead to information security incidents. By providing information security awareness, education, and training to their staff, the auditee could also increase their competence and performance, and ensure the effectiveness and efficiency of the information security processes and controls.
References:
1: ISO/IEC 27001:2022 - Information technology - Security techniques - Information security management systems - Requirements, Annex A 2: ISO/IEC 27002:2022 - Information technology - Security techniques - Code of practice for information security controls, clause 8.2.1 3: ISO/IEC 27002:
2022 - Information technology - Security techniques - Code of practice for information security controls, clause 18.1.4 4: ISO/IEC 27002:2022 - Information technology - Security techniques - Code of practice for information security controls, clause 7.2.2

 

NEW QUESTION # 354
......

At Lead2PassExam, we are aware that every applicant of the PECB Certified ISO/IEC 27001 Lead Auditor exam (ISO-IEC-27001-Lead-Auditor) examination is different. We know that everyone has a distinct learning style, situations, and set of goals, therefore we offer PECB ISO-IEC-27001-Lead-Auditor updated exam preparation material in three easy-to-use formats to accommodate every exam applicant's needs. This article will go over the three formats of the PECB Certified ISO/IEC 27001 Lead Auditor exam (ISO-IEC-27001-Lead-Auditor) practice material that we offer.

Latest ISO-IEC-27001-Lead-Auditor Study Guide: https://www.lead2passexam.com/PECB/valid-ISO-IEC-27001-Lead-Auditor-exam-dumps.html

• Valid ISO-IEC-27001-Lead-Auditor Test Simulator 🌏 Latest ISO-IEC-27001-Lead-Auditor Version 🖤 ISO-IEC-27001-Lead-Auditor Guide 🚺 Go to website （ www.lead1pass.com ） open and search for 【 ISO-IEC-27001-Lead-Auditor 】 to download for free ❗Real ISO-IEC-27001-Lead-Auditor Question
• Pass Guaranteed 2025 PECB Marvelous ISO-IEC-27001-Lead-Auditor: PECB Certified ISO/IEC 27001 Lead Auditor exam Valid Study Guide 👭 Search for ➥ ISO-IEC-27001-Lead-Auditor 🡄 and download exam materials for free through ➠ www.pdfvce.com 🠰 😚ISO-IEC-27001-Lead-Auditor Reliable Exam Test
• ISO-IEC-27001-Lead-Auditor Reliable Exam Test 🥣 ISO-IEC-27001-Lead-Auditor Latest Exam Answers 📼 Dumps ISO-IEC-27001-Lead-Auditor PDF 😨 Go to website “ www.prep4sures.top ” open and search for 「 ISO-IEC-27001-Lead-Auditor 」 to download for free 🐁Exam Dumps ISO-IEC-27001-Lead-Auditor Zip
• One of the Best Ways to Prepare For the ISO-IEC-27001-Lead-Auditor PECB Certified ISO/IEC 27001 Lead Auditor exam Exam 🧧 Immediately open ➡ www.pdfvce.com ️⬅️ and search for ▶ ISO-IEC-27001-Lead-Auditor ◀ to obtain a free download 👱Latest ISO-IEC-27001-Lead-Auditor Exam Cram
• ISO-IEC-27001-Lead-Auditor Questions and Answers: PECB Certified ISO/IEC 27001 Lead Auditor exam - ISO-IEC-27001-Lead-Auditor Practice Test 🚈 Search for ▷ ISO-IEC-27001-Lead-Auditor ◁ and easily obtain a free download on ▷ www.prep4sures.top ◁ 📒Dumps ISO-IEC-27001-Lead-Auditor PDF
• One of the Best Ways to Prepare For the ISO-IEC-27001-Lead-Auditor PECB Certified ISO/IEC 27001 Lead Auditor exam Exam 🥵 Search for ⮆ ISO-IEC-27001-Lead-Auditor ⮄ and download exam materials for free through ⮆ www.pdfvce.com ⮄ 📴Real ISO-IEC-27001-Lead-Auditor Question
• ISO-IEC-27001-Lead-Auditor Sample Test Online 🚦 Braindumps ISO-IEC-27001-Lead-Auditor Torrent 😐 Valid ISO-IEC-27001-Lead-Auditor Test Simulator 🏐 The page for free download of ➥ ISO-IEC-27001-Lead-Auditor 🡄 on ▶ www.free4dump.com ◀ will open immediately 🧡Latest ISO-IEC-27001-Lead-Auditor Version
• ISO-IEC-27001-Lead-Auditor exam practice material - ISO-IEC-27001-Lead-Auditor study training pdf - ISO-IEC-27001-Lead-Auditor online test engine ♥ Search for 《 ISO-IEC-27001-Lead-Auditor 》 on ✔ www.pdfvce.com ️✔️ immediately to obtain a free download 🗨ISO-IEC-27001-Lead-Auditor Latest Braindumps Pdf
• Latest ISO-IEC-27001-Lead-Auditor Exam Cram 💆 ISO-IEC-27001-Lead-Auditor Customizable Exam Mode 🚦 Exam ISO-IEC-27001-Lead-Auditor Vce Format 🧲 Download ▷ ISO-IEC-27001-Lead-Auditor ◁ for free by simply searching on ⮆ www.prep4pass.com ⮄ 🌒ISO-IEC-27001-Lead-Auditor Guide
• ISO-IEC-27001-Lead-Auditor exam practice material - ISO-IEC-27001-Lead-Auditor study training pdf - ISO-IEC-27001-Lead-Auditor online test engine 🌽 Download ⮆ ISO-IEC-27001-Lead-Auditor ⮄ for free by simply searching on （ www.pdfvce.com ） 🍲ISO-IEC-27001-Lead-Auditor Latest Braindumps Pdf
• Exam Dumps ISO-IEC-27001-Lead-Auditor Zip 🔶 ISO-IEC-27001-Lead-Auditor Reliable Exam Test 🌺 Exam ISO-IEC-27001-Lead-Auditor Questions Answers 🥫 Simply search for 《 ISO-IEC-27001-Lead-Auditor 》 for free download on ⇛ www.dumps4pdf.com ⇚ ☀ISO-IEC-27001-Lead-Auditor Latest Braindumps Pdf
• ISO-IEC-27001-Lead-Auditor Exam Questions
• learnbyprojects.com nxgclouds.com rkrwebtechz.com swift-tree.dev xg.youmengcms.com medhome.courses www.jodoblog.com glengre344.vidublog.com programi.healthandmore.rs jekscryptoacademy.com

P.S. Free 2025 PECB ISO-IEC-27001-Lead-Auditor dumps are available on Google Drive shared by Lead2PassExam: https://drive.google.com/open?id=1MBSBOTOzKNwlxnHTrYQsGNym-i3G7eXe