ISO 27000 Foundation Certification ISO 27000 Foundation Certification MCQ 2

Question 1

Which ISO 27000 series standard provides requirements for establishing an Information Security Management System (ISMS)?

Accepted Answer

ISO 27001

Answer

ISO 27001 is the standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an ISMS.

Question 2

In the context of ISO 27000, what does 'availability' mean in the CIA triad?

Accepted Answer

Authorized users can access information when needed

Answer

Availability means ensuring that authorized users have access to information and associated assets when required.

Question 3

What is the purpose of a Statement of Applicability (SoA) in ISO 27001?

Accepted Answer

To document which controls are applicable and why others are excluded

Answer

The SoA documents the controls selected from Annex A, justifies their inclusion, and explains why any controls were excluded.

Question 4

Which term describes the potential for a threat to exploit a vulnerability?

Accepted Answer

Risk

Answer

Risk is the combination of the likelihood that a threat will exploit a vulnerability and the resulting impact on the organization.

Question 5

What does the Plan phase of the PDCA cycle involve in an ISMS context?

Accepted Answer

Establishing ISMS policies, objectives, and risk treatment plans

Answer

The Plan phase involves defining the ISMS scope, policy, risk assessment methodology, and selecting appropriate controls.

ISO 27000 Foundation Certification Practice Test