ISO-IEC-27002-Foundation試験無料問題集（73題）「PECB ISO/IEC 27002 Foundation 認定」

出題：1

What should be considered, among others, when establishing a remote working policy?

A. The positioning of information processing facilities handling sensitive data

B. The threat of unauthorized access to information or resources from other persons in public places

C. The maintenance of authorization process and record of all privileges allocated

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

An organization has set up a fire alarm. What type of control is this?

A. Detective and technical

B. Preventive and legal

C. Corrective and managerial

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What does ISO/IEC 27002 recommend regarding audit testing?

A. Audit tests should be planned and agreed upon between the tester and the appropriate management

B. Audit tests and other assurance activities should be conducted ad hoc to determine the effectiveness of operational systems and business processes

C. The organization should temporarily stop its operational systems and business processes during audits and other assurance activities

正解：A 解答を投票する

出題：4

How many control categories (themes) does the 2022 version of ISO/IEC 27002 organize its controls into?

A. 14

B. 4

C. 7

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

When can clock synchronization be difficult?

A. Both

B. When using multiple cloud services

C. When using only on-premises services

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An organization has established and maintains contact with special interest groups with which it shares and obtains information about security threats, vulnerabilities, trends etc. Based on ISO/IEC 27002, is this a good practice?

A. No, organization should avoid sharing or exchanging information about new threats or vulnerabilities

B. No, organization should share such information only with the authorities

C. Yes, it is recommended for organization to establish and maintain contact with special interest groups regarding security threats, trends, etc.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which control of ISO/IEC 27002 helps organizations ensure that employees and contractors are suitable for their roles?

A. Control 6.1 Screening

B. Control 6.7 Remote working

C. Control 6.4 Disciplinary process

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

What is the primary purpose of control 5.29 Information security during disruption?

A. To manage supplier contracts

B. To ensure the organization plans how to maintain information security during disruptive events

C. To classify business continuity documentation

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

ISO-IEC-27002-Foundation試験無料問題集「PECB ISO/IEC 27002 Foundation 認定」