ISO 27000 Foundation Certification Prior Knowledge 2

Question 1

Which of the following best describes 'information security' as defined in ISO 27000?

Accepted Answer

Preservation of confidentiality, integrity, and availability of information

Answer

ISO 27000 defines information security as the preservation of confidentiality, integrity, and availability (CIA triad) of information.

Question 2

In the context of ISO 27001, what is the primary purpose of an Information Security Management System (ISMS)?

Accepted Answer

To provide a systematic approach to managing sensitive information and risks

Answer

An ISMS provides a systematic, risk-based approach to managing sensitive company information and protecting it.

Question 3

Which term in ISO 27000 refers to the potential for a threat to exploit a vulnerability?

Accepted Answer

Risk

Answer

Risk in ISO 27000 is the potential that a threat will exploit a vulnerability, causing harm to the organization.

Question 4

What does 'availability' mean as a core property of information security?

Accepted Answer

Information is accessible only to authorized users at all times

Answer

Availability means that information and systems are accessible to authorized users whenever needed.

Question 5

Which ISO standard provides the vocabulary and definitions used across the ISO 27000 family?

Accepted Answer

ISO 27000

Answer

ISO 27000 is the overview and vocabulary standard that provides common terms and definitions for the entire ISO 27000 family.

ISO 27000 Foundation Certification Practice Test