ISO 27000 Foundation Certification Information Security 3

Question 1

Which of the following is an example of a physical information security control?

Accepted Answer

Locked server room doors

Answer

Physical controls protect assets through tangible means such as locked doors, security cameras, and access badges.

Question 2

ISO 27000 defines 'information security' as preserving which three core properties?

Accepted Answer

Confidentiality, integrity, and availability

Answer

ISO 27000 defines information security as preservation of confidentiality, integrity, and availability (the CIA triad).

Question 3

A company decides to purchase cyber insurance to handle a specific risk. Which risk treatment option does this represent?

Accepted Answer

Risk transfer

Answer

Purchasing insurance transfers the financial consequences of a risk to another party (the insurer).

Question 4

What is an 'asset' in the context of ISO 27000?

Accepted Answer

Anything that has value to the organization

Answer

ISO 27000 broadly defines an asset as anything that has value to the organization, including information, software, hardware, and services.

Question 5

Which document in the ISMS formally commits the organization to information security?

Accepted Answer

Information security policy

Answer

The information security policy is the top-level document that formally commits the organization to its security objectives and direction.

ISO 27000 Foundation Certification Practice Test