FREE ISO 27000 Foundation Certification Information Security Questions and Answers

Question 1

How is a "asset" defined in ISO/IEC 27000?

Accepted Answer

Anything that is of value to the organization

Answer

Tangible and non-tangible items owned or rented by an organization

Answer

A physical item within the organization

Answer

Digital and physical items owned by an organization

Question 2

Which of the following, as described in Annex A, are ISO 27001 control sets?

Accepted Answer

All of the above

Answer

Asset management

Answer

Access control

Answer

Information security policies

Question 3

What exactly does PDCA mean?

Accepted Answer

Plan, Do, Check, Act

Answer

Prepare, Do, Critique, Assess

Answer

Plan, Design, Confirm, Act

Answer

Prepare, Do, Critique, Appraisal

Question 4

Which of the following now poses a threat to several organizations?

Accepted Answer

All of the above

Answer

Fraud

Answer

Unauthorized access

Answer

Loss of information

Question 5

All of the above

Accepted Answer

Provides terms and definitions commonly used in ISO/IEC 27001

Answer

Provides information on security risk management

Answer

Provides guidelines for network security

Answer

Outlines a code of practice for information security controls

Question 6

Which clause of ISO/IEC 27001 deals with operational planning and control?

Accepted Answer

8.1

Answer

8.3

Answer

7.4

Answer

7.1

Question 7

Which clause of ISO/IEC 27001 deals with remedial action?

Accepted Answer

10.1

Answer

9.2

Answer

9.1

Answer

10.2