ISO 27000 Foundation Certification Prior Knowledge 4

Question 1

Which of the following best describes 'non-repudiation' in information security?

Accepted Answer

Ensuring a party cannot deny having performed an action

Answer

Non-repudiation ensures that parties to a transaction cannot deny having sent or received information, often achieved through digital signatures.

Question 2

In ISO 27000, which term describes a weakness in an asset or control that a threat could exploit?

Accepted Answer

Vulnerability

Answer

A vulnerability is a weakness in an asset, system, or control that can be exploited by a threat to cause harm.

Question 3

Which statement correctly describes the Plan-Do-Check-Act (PDCA) cycle as applied to an ISMS?

Accepted Answer

It is a continual improvement cycle applied to ISMS maintenance

Answer

The PDCA cycle is a continual improvement model that helps organizations systematically improve their ISMS over time.

Question 4

A company decides to stop offering a high-risk online service to remove the associated information security risk. Which risk treatment is this?

Accepted Answer

Risk avoidance

Answer

Risk avoidance involves ceasing the activity that creates the risk entirely, removing the risk at its source.

Question 5

Which of the following is an example of a technical control in information security?

Accepted Answer

Multi-factor authentication system

Answer

Technical controls are implemented through technology; multi-factor authentication is a software/hardware-based security measure.

ISO 27000 Foundation Certification Practice Test