ISO 27000 Foundation Certification ISO 27000 Foundation Certification MCQ 5

Question 1

Which ISO standard provides guidance specifically on information security incident management?

Accepted Answer

ISO 27035

Answer

ISO 27035 provides guidelines for planning, detecting, reporting, assessing, and responding to information security incidents.

Question 2

What is the primary objective of a Business Continuity Plan (BCP) in the context of an ISMS?

Accepted Answer

To ensure critical business functions can continue during and after a disruption

Answer

A BCP ensures that essential business activities can be maintained or rapidly recovered following a significant disruption.

Question 3

In ISO 27001, what is the purpose of a management review?

Accepted Answer

To evaluate the ISMS performance and make decisions for continual improvement

Answer

Management reviews assess the continuing suitability, adequacy, and effectiveness of the ISMS and drive improvements.

Question 4

What does 'asset classification' involve under ISO 27001?

Accepted Answer

Categorizing assets based on their value and sensitivity to apply appropriate protection

Answer

Asset classification assigns labels such as public, internal, confidential, or secret to determine the level of protection each asset requires.

Question 5

Which of the following best describes 'risk transfer' as a risk treatment option?

Accepted Answer

Moving risk responsibility to another party such as via insurance or outsourcing

Answer

Risk transfer involves shifting the financial or operational consequences of a risk to a third party, such as purchasing cyber insurance.

ISO 27000 Foundation Certification Practice Test