ISO-IEC-27002-Foundation 무료 덤프문제 온라인 액세스

What is the purpose of control 5.9 Inventory of information and other associated assets?

• A.To define supplier security requirements
• B.To ensure encryption of all stored data
• C.To identify organizational assets and define appropriate protection responsibilities

Which control should an organization implement to ensure that the software is written securely and the number of potential of vulnerabilities in the software is reduced?

• A.Control 8.28 Secure coding
• B.Control 8.29 Security testing in development and acceptance
• C.Control 8.26 Application security requirements

What is the purpose of "segregation of duties" (control 5.3)?

• A.To reduce the risk of fraud, error, or misuse by dividing conflicting duties among different individuals
• B.To ensure all employees have the same access rights
• C.To classify information assets

Which control requires the use of cryptography to protect the confidentiality, authenticity, or integrity of information?

• A.8.25 Secure development life cycle
• B.8.26 Application security requirements
• C.8.24 Use of cryptography

According to control 5.27 Learning from information security incidents, how can organizations use the information gained from the evaluation of information security incidents?

• A.To enhance the incident management plan
• B.To enhance user awareness and training
• C.Both