FREE ISO 27000 Foundation Annex A Control Themes Questions and Answers

Question 1

The 2022 revision of ISO/IEC 27001 restructured the Annex A controls into four high-level themes. Which of the following correctly lists these four themes?

Accepted Answer

Organizational, People, Physical, and Technological

Answer

Access Control, Cryptography, Operations Security, and Communications Security

Answer

Policies, Procedures, Technical Implementations, and Physical Safeguards

Answer

Risk Assessment, Asset Management, Incident Management, and Business Continuity

Question 2

An organization is implementing a new mandatory security awareness training program and updating its disciplinary process for information security policy violations. Under which ISO/IEC 27001:2022 Annex A theme would these controls primarily be classified?

Accepted Answer

People controls

Answer

Organizational controls

Answer

Technological controls

Answer

Physical controls

Question 3

An IT department is focused on implementing data leakage prevention measures, managing the secure configuration of servers, and deploying malware protection. These activities are most representative of which Annex A control theme?

Accepted Answer

Technological controls

Answer

People controls

Answer

Physical controls

Answer

Organizational controls

Question 4

Which of the following controls is primarily categorized under the 'Physical controls' theme (A.7) in ISO/IEC 27001:2022 Annex A?

Accepted Answer

Securing offices, rooms, and facilities

Answer

Information security for use of cloud services

Answer

Information security awareness, education, and training

Answer

Management of technical vulnerabilities

Question 5

A company is defining its overall information security policies, assigning security roles and responsibilities, and establishing its process for information classification. These foundational activities fall under which Annex A control theme?

Accepted Answer

Organizational controls

Answer

People controls

Answer

Technological controls

Answer

Physical controls

Question 6

An auditor is reviewing a company's 'clear desk and clear screen' policy and the measures taken to secure equipment located off-premises. These specific controls are key components of which Annex A theme?

Accepted Answer

Physical controls

Answer

Technological controls

Answer

Organizational controls

Answer

People controls