FREE ISO 27000 Foundation Certification Prior Knowledge Questions and Answers

Question 1

Which of the following must be documented (in Clause 6) according to ISO 27001:2013?

Accepted Answer

Risk assessment

Answer

Risk treatment

Answer

None of the above

Question 2

Where in the standard is a reference to controls and control goals to be found?

Accepted Answer

Annex A

Answer

Annex SL

Answer

Clause 9 Performance evaluation

Question 3

The management system's scope must be kept up to date as written information.

Accepted Answer

True

Answer

False

Question 4

"The only emphasis of ISO 27001:2013 is the protection of personal information."

Accepted Answer

False

Answer

True

Question 5

What must the company create?

Accepted Answer

Statement of applicability

Answer

Statement of control

Answer

Statement of implementation

Question 6

What does "fulfillment of a requirement" mean in ISO 27001:2013?

Accepted Answer

Conformity

Answer

Compliance

Answer

None of the above

Question 7

Which does not fall under senior management's purview?

Accepted Answer

Appoint a management representative

Answer

Promoting continual improvement

Answer

Establish an information security policy