Online Access Free ISO-IEC-27002-Foundation Exam Questions

Which control requires the use of cryptography to protect the confidentiality, authenticity, or integrity of information?

• A.8.24 Use of cryptography
• B.8.26 Application security requirements
• C.8.25 Secure development life cycle

Which of the following best describes "availability" as an information security principle?

• A.Ensuring information and assets are accessible and usable when needed by an authorized entity
• B.Ensuring information has not been altered without authorization
• C.Ensuring information is only seen by authorized parties

What does ISO/IEC 27002 recommend regarding audit testing?

• A.The organization should temporarily stop its operational systems and business processes during audits and other assurance activities
• B.Audit tests should be planned and agreed upon between the tester and the appropriate management
• C.Audit tests and other assurance activities should be conducted ad hoc to determine the effectiveness of operational systems and business processes

What is continual improvement?

• A.A method of examining the nature of something or of determining its essential features and their relations
• B.The process of increasing the effectiveness and efficiency of the organization to fulfill its policy and objectives
• C.The action taken to eliminate a detected nonconformity

Which of the following is an example of a "people" control in ISO/IEC 27002?

• A.7.1 Physical security perimeters
• B.6.3 Information security awareness, education and training
• C.8.1 User endpoint devices