ISO 27000 Foundation Certification ISO 27000 Foundation Certification MCQ 3

Question 1

What is the primary purpose of ISO 27002 in relation to ISO 27001?

Accepted Answer

It provides guidance on implementing the controls referenced in ISO 27001 Annex A

Answer

ISO 27002 is a code of practice that provides implementation guidance for the information security controls listed in ISO 27001 Annex A.

Question 2

In ISO 27000 terminology, what is a 'vulnerability'?

Accepted Answer

A weakness that could be exploited by a threat

Answer

A vulnerability is a weakness in an asset or control that could be exploited by one or more threats.

Question 3

Which ISO 27000 standard specifically addresses information security for cloud services?

Accepted Answer

ISO 27017

Answer

ISO 27017 provides guidelines for information security controls applicable to the provision and use of cloud services.

Question 4

What does 'risk acceptance' mean in an ISO 27001 risk treatment context?

Accepted Answer

Deciding to tolerate a risk without further treatment

Answer

Risk acceptance means the organization consciously decides to retain the risk because the cost of treatment outweighs the potential impact.

Question 5

Which clause of ISO 27001 covers 'Context of the Organization'?

Accepted Answer

Clause 4

Answer

Clause 4 requires organizations to understand their internal and external context, interested parties, and the scope of the ISMS.

ISO 27000 Foundation Certification Practice Test