ISO-IEC-27001-Foundation 무료 덤프문제 온라인 액세스

Which information is required to be included in the Statement of Applicability?

• A.The criteria against which risk will be evaluated
• B.The justification for including each information security control
• C.The scope and boundaries of the ISMS
• D.The risk assessment approach of the organization

Who is required to ensure that staff are supported so that they can contribute to the information security management system?

• A.Auditors who audit each area of operation
• B.ISO/IEC 27001 practitioners within the organization
• C.Top management of the organization
• D.Management responsible for each area of operation

Which item is required to be included in an information security policy?

• A.A commitment to satisfy applicable requirements related to information security
• B.A plan for the continual improvement of the information security management system
• C.A framework enabling concerns with the information security policy to be addressed
• D.A Statement of Applicability which defines the necessary controls to be implemented

What is the name of the control clause used to control information security breaches within Annex A of ISO
/IEC 27001?

• A.Reporting information security incidents
• B.Information security event reporting
• C.Response to information security events
• D.Information security event management

Which statement describes the Classification of information control in Annex A of ISO/IEC 27001?

• A.Ensures the rules to control physical and logical access apply to assets
• B.Ensures that all information assets are labelled with their classification
• C.Ensures that security perimeters are used to protect assets
• D.Ensures that information is classified based on confidentiality, integrity and availability