PECB Lead Auditor (ISO/IEC 27001) — Question 23

Auditor competence is a combination of knowledge and skills. Which two of the following activities are predominately related to "knowledge"? (Choose two.)

Answer options

• A. Communicate with the auditee
• B. Designing a checklist
• C. Determining how to seek evidence from the auditee
• D. Determining what evidence to gather
• E. Follow an audit trail deviating from the prepared checklist
• F. Understanding how to identify findings

Correct answer: B, D

Explanation

The correct answers, B and D, focus on the conceptual understanding required to design a checklist and determine what evidence is necessary, both of which are based on knowledge. The other options involve practical skills or communication that do not primarily relate to knowledge.