PRE TEST - ISO 27001

What is ISMS stands for?

• Information Safety Management System

• Integrated Security Management System

• Integrated Safety Management System

• Information Security Management System

Which control focuses on creating awareness and providing education and training to employees about information security practices?

• Return of assets

• Monitoring, review, and change management of supplier services

• Information security awareness, education, and training

• Installation of software on operational systems

What is the purpose of the "Policies for information security" control (Annex 5,1) in ISO 27001:2022?

• To ensure clear labeling of sensitive information

• To define the rules and guidelines for information security within an organization

• To establish physical security perimeters

• To manage technical vulnerabilities

What is the purpose of "Threat intelligence" control in ISO 27001:2022?

• To collect and analyze information about potential security threats

• To monitor physical security

• To classify information

• To manage technical vulnerabilities

What does "Secure authentication" (Annex 8,5) control in ISO 27001:2022 aim to achieve?

• Protecting against malware

• Protecting information during audit testing

• Managing technical vulnerabilities

• Ensuring strong passwords are used

What term refers to the process of determining the classification level of information based on its sensitivity and importance?

• Data masking

• Inventory of information and other associated asset

• Classification of information

• Protection of PII

In which documents is it stated that the implementation of all 93 controls concerning information security should be thoroughly documented?

• Risk Management Policy

• Statement of Applicability

• ISMS Policy

• Organization Context and Scope of Implementation ISMS

What does PII stand for in the context of ISO 27001:2022?

• Personally Identifiable Information

• Protected Information Items

• Private Investigator Intelligence

• Personal Interactions and Involvement

In an ISMS, which of the following concepts focuses on maintaining the CIA of information assets, ensuring they are protected from unauthorized access, tampering, and disruptions. EXCEPT?

• Confidentiality

• Infinity

• Integrity

• Availability

Which control emphasizes the need to define and enforce rules regarding the appropriate use of information and associated assets?

• Information access restriction
  

• Secure development life cycle

• Acceptable use of information and other associated assets

• Protection of information systems during audit testing