CSC ISO 27001 Controls 2

Question 1

Under ISO 27001 Annex A, which control category addresses the management of removable media?

Accepted Answer

A.12 Operations Security

Answer

A.8 Asset Management

Answer

A.9 Access Control

Answer

A.13 Communications Security

Question 2

What is the primary purpose of a Statement of Applicability (SoA) in ISO 27001?

Accepted Answer

To document which Annex A controls are applicable and justify exclusions

Answer

To list all identified risks and their scores

Answer

To record all security incidents during the audit period

Answer

To define the ISMS scope boundaries

Question 3

ISO 27001 control A.14 covers which domain?

Accepted Answer

System Acquisition, Development and Maintenance

Answer

Supplier Relationships

Answer

Incident Management

Answer

Business Continuity Management

Question 4

Which ISO 27001 Annex A control specifically requires organizations to screen personnel before employment?

Accepted Answer

A.7.1.1 Screening

Answer

A.6.1.1 Information security roles and responsibilities

Answer

A.7.2.1 Management responsibilities

Answer

A.8.1.1 Inventory of assets

Question 5

An organization wants to ensure that security patches are applied within 30 days of release. Which Annex A control supports this requirement?

Accepted Answer

A.12.6.1 Management of technical vulnerabilities

Answer

A.12.1.2 Change management

Answer

A.14.2.2 System change control procedures

Answer

A.16.1.3 Reporting information security weaknesses

Question 6

Which control under ISO 27001 Annex A addresses the use of cryptographic controls and key management?

Accepted Answer

A.10.1 Cryptographic controls

Answer

A.12.3 Backup

Answer

A.13.1 Network security management

Answer

A.8.3 Media handling

Question 7

In ISO 27001, what does the control A.17.1 address?

Accepted Answer

Information security continuity

Answer

Compliance with legal and contractual requirements

Answer

Supplier service delivery management

Answer

Security in project management