ISO/IEC 27001:2022 Quiz

What is the primary purpose of information security?

• To eliminate all data breaches

• To increase data storage capacity

• To ensure data is stored indefinitely

• To maintain confidentiality, integrity, and availability of information

Which of the following is NOT classified as a type of information?

• Market data

• Statistical information

• Technical specifications

• Physical attributes

What does GDPR stand for?

• Global Data Privacy Regulation

• General Data Protection Regulation

• Global Data Protection Regulation

• General Data Privacy Regulation

Which of the following is a new control introduced in ISO/IEC 27002:2022?

• Data encryption

• Threat intelligence

• Incident response

• User access management

What is the main focus of the new control group 'Technology' in ISO/IEC 27002:2022?

• Organizational policies

• Human resource management

• Physical security measures

• Technological solutions and security

What is the purpose of data masking?

• To ensure data is permanently deleted

• To increase data processing speed

• To limit exposure of sensitive data

• To enhance data storage

Which of the following is a principle of GDPR?

• Data obfuscation

• Data minimization

• Data maximization

• Data duplication

What does the 'C' in the CIA triad stand for?

• Consistency

• Compliance

• Confidentiality

• Control

What is the main goal of threat intelligence?

• To provide awareness of the organization’s threat environment

• To collect data for marketing

• To increase data storage capacity

• To eliminate all potential threats

What is a key component of the ISO 27001:2022 framework?

• Regular audits must be conducted

• All employees must have access to all data

• Data must be deleted after one year

• Only management can access sensitive information