ISO-IEC-27002-Foundation 무료 덤프문제 온라인 액세스

What does control 5.7 Threat intelligence primarily concern?

• A.Defining access control rules
• B.Collecting and analyzing information about existing or emerging threats
• C.Managing supplier relationships

Which control requires the use of cryptography to protect the confidentiality, authenticity, or integrity of information?

• A.8.25 Secure development life cycle
• B.8.26 Application security requirements
• C.8.24 Use of cryptography

Which control should an organization implement to ensure that the software is written securely and the number of potential of vulnerabilities in the software is reduced?

• A.Control 8.26 Application security requirements
• B.Control 8.28 Secure coding
• C.Control 8.29 Security testing in development and acceptance

What does ISO/IEC 27002 recommend regarding audit testing?

• A.Audit tests should be planned and agreed upon between the tester and the appropriate management
• B.The organization should temporarily stop its operational systems and business processes during audits and other assurance activities
• C.Audit tests and other assurance activities should be conducted ad hoc to determine the effectiveness of operational systems and business processes

What is the primary purpose of control 5.13 Labelling of information?

• A.To restrict physical access to classified documents
• B.To determine ownership of information assets
• C.To facilitate communication of classification and support automated processing