FREE ISO 27000 Foundation Certification MCQ Questions and Answers

Question 1

What has to be done as part of the monitoring, measuring, analysis, and evaluation process?

Accepted Answer

Evaluate the effectiveness of the ISMS

Answer

Monitor the cost of maintaining the ISMS

Answer

Analyse the percentage use of automated process

Answer

Measure the number of risks

Question 2

Which task must be completed while analyzing risks?

Accepted Answer

Determine the likelihood of the occurrence of the risks

Answer

Identify the risks associated with loss of confidentiality

Answer

Accept all evaluated risks

Answer

Select appropriate controls

Question 3

Find the terms that are absent from the following phrase. The company must decide which __ are relevant to its goal to comprehend what can prevent the ISMS from producing the desired results.

Accepted Answer

External and internal issues

Answer

Quantified and non-quantified benefits

Answer

Customers and interested parties

Answer

Needs and expectations

Question 4

Which benefit does running an information security management system NOT provide?

Accepted Answer

Eliminate all information security vulnerabilities in the organization

Answer

Reduce the probability of information security incidents

Answer

Increase in shareholder trust in the organization

Answer

Provide consistent management and operation of information security across the organization

Question 5

What elements must be taken into account while deciding the ISMS's scope?

Accepted Answer

External and internal issues

Answer

Assets and resources

Answer

Threat and vulnerable

Answer

Risks and opportunities

Question 6

Which activity DOES NOT fall under a certifying body's mandates and obligations?

Accepted Answer

Advise how to fill the gaps found during a readiness assessment

Answer

Internal and lead auditor training

Answer

Check and approve the scope of the ISMS

Answer

Use external auditors to carry out formal assessment against ISO/IEC 27001

Question 7

What kind of action is necessary in light of the suggested residual risks?

Accepted Answer

Risk owners shall approve their acceptance

Answer

Residual risks can be ignored

Answer

Management shall transfer them to third parties

Answer

The ISMS implementation team shall re-assess them