Online Access Free ISO-IEC-27002-Foundation Exam Questions

An organization has set up a fire alarm. What type of control is this?

• A.Preventive and legal
• B.Detective and technical
• C.Corrective and managerial

What is the objective of control 8.12 Data leakage prevention?

• A.To classify information based on sensitivity
• B.To detect and prevent unauthorized disclosure and extraction of information by individuals or systems
• C.To manage user access rights

What is a PII controller?

• A.A privacy stakeholder that handles PII on behalf of and in accordance with the instructions of a PII controller
• B.A natural person to whom the PII relates
• C.A privacy stakeholder (or stakeholders) that determines the purpose and means for processing PII besides individuals who use data for personal purposes

What is the primary purpose of control 5.13 Labelling of information?

• A.To facilitate communication of classification and support automated processing
• B.To restrict physical access to classified documents
• C.To determine ownership of information assets

What is the purpose of control 8.20 Network security of ISO/IEC 27002?

• A.To split the network in security boundaries
• B.To protect information in networks and its supporting information processing facilities from compromise via the network
• C.To ensure security in the use of network services