CSC ISO 27001 Controls 2

Question 1

Under ISO 27001 Annex A, which control category addresses the management of removable media?

Accepted Answer

A.12 Operations Security

Answer

A.12 Operations Security includes A.12.3, which covers information backup and media handling including removable media.

Question 2

What is the primary purpose of a Statement of Applicability (SoA) in ISO 27001?

Accepted Answer

To document which Annex A controls are applicable and justify exclusions

Answer

The SoA documents every Annex A control, states whether it is applied, and provides justification for any exclusions.

Question 3

ISO 27001 control A.14 covers which domain?

Accepted Answer

System Acquisition, Development and Maintenance

Answer

A.14 System Acquisition, Development and Maintenance ensures security requirements are addressed throughout the software development lifecycle.

Question 4

Which ISO 27001 Annex A control specifically requires organizations to screen personnel before employment?

Accepted Answer

A.7.1.1 Screening

Answer

A.7.1.1 Screening requires background verification checks on candidates for employment in accordance with laws and regulations.

Question 5

An organization wants to ensure that security patches are applied within 30 days of release. Which Annex A control supports this requirement?

Accepted Answer

A.12.6.1 Management of technical vulnerabilities

Answer

A.12.6.1 Management of Technical Vulnerabilities requires timely identification and remediation of technical vulnerabilities including patching.

(CSC) Cybersecurity Compliance Certification Practice Test