ISO-IEC-27001-Foundation 무료 덤프문제 온라인 액세스

Which trend in information security performance is required to be considered during a management review of the ISMS?

• A.Decisions related to continual improvement opportunities
• B.Validity of information continuity controls
• C.Achievement of information security objectives
• D.Relevant external and internal requirements changes

Which of the following statements about the relationship between ISO/IEC 27001 and ISO/IEC
27002 is true?
(1) ISO/IEC 27002 provides implementation advice on the controls selected during the ISO/IEC
27001 information security risk management process
(2) ISO/IEC 27002 provides a process for information security risk management which implements the requirements of ISO/IEC 27001

• A.Only 1 is true
• B.Only 2 is true
• C.Both 1 and 2 are true
• D.Neither 1 or 2 is true

What is the purpose of risk assessment?

• A.To perform penetration testing
• B.To install security software
• C.To identify, analyze, and evaluate information security risks
• D.To eliminate all risks

Which activity is a required element of information security risk identification?

• A.Determine the level of risk
• B.Consider the likelihood of the occurrence
• C.Prioritize the risk for treatment
• D.Determine the risk owners

Identify the missing words in the following sentence.
The organization shall establish, implement, maintain and [ ? ] an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.

• A.enforce standards for
• B.report on
• C.communicate the importance of
• D.continually improve