ISO-IEC-27001-Foundation 무료 덤프문제 온라인 액세스

Which audit activity related to ISO/IEC 27001 may be carried out by a practitioner?

• A.Conduct an audit of an Accredited Training Organization
• B.Conduct a surveillance audit of their own area of the organization
• C.Conduct an internal audit of the organization
• D.Conduct an audit of a Certification Body

Which of the following is NOT one of the four Annex A control themes?

• A.Organizational Controls
• B.Technological Controls
• C.People Controls
• D.Financial Controls

Who is responsible for demonstrating leadership and commitment to the ISMS?

• A.Top management
• B.Internal auditors
• C.External consultants
• D.IT administrators

Which attribute is NOT a required focus of continual ISMS improvement?

• A.Importance
• B.Adequacy
• C.Effectiveness
• D.Suitability

What is the purpose of corrective action in ISO/IEC 27001?

• A.To eliminate the cause of a nonconformity and prevent recurrence
• B.To perform an external audit
• C.To punish employees
• D.To increase the number of controls