ISO27001

ISO 27001 is the main standard in the ISO 27K family, it mainly defines what is needed, but does not specify how:

• TRUE

• FALSE

Solutions that enable resilience and redundancy of your systems and planned based on your risk assessment, will support:

• Confidentiality

• Integrity

• Availability

• All of the above

It monitor systems in order to recognize unusual activities and if needed, to activate the appropriate incident response

• Security Incident Management

• Physical Security Perimeter

• Communications Security Management

• Information Transfer Security

Delete data when no longer required, in order to avoid leakage & to enable compliance with privacy requirements is

• Capacity management

• Information backup

• Event logging

• Secure disposal or reuse of equipment

Following are mandatory requirement of ISMS EXCEPT:

• Scope of ISMS

• Information Security Policy

• Security Objectives for Non-Conformance

• Statement of Applicability

The adoption of an information security management system is a strategic decision for an organization.

• TRUE

• FALSE

Information security management system preserves all EXCEPT:

• Confidentiality

• Integrity 

• Authenticity 

• Availability

The MOST common cause of many internal security incidents in organization is:

• Poor recruitment processes

• Lack of security operating procedures

• Inadequate network protection measures

• Lack of awareness on the part of staff

An example of a control which helps to protect against Unintentional Disclosure of information is

• Regular incremental and full backups

•  A formal disciplinary process

• Classification labelling of information

• Independent review of information security

Risk remaining after the treatment of risk is known as:

• Control Risk

• Audit Risk

• Residual Risk

• Inherent Risk