FREE ISO 27000 Foundation ISMS Fundamentals and Vocabulary Questions and Answers

Question 1

According to ISO/IEC 27000, which of the following BEST defines 'confidentiality' as a core principle of information security?

Accepted Answer

The property that information is not made available or disclosed to unauthorized individuals, entities, or processes.

Answer

The property of accuracy and completeness of information.

Answer

The property of being accessible and usable upon demand by an authorized entity.

Answer

The property of ensuring that the actions of an entity can be traced uniquely to that entity.

Question 2

A financial company identifies that a disgruntled former employee still possesses network access credentials. In the context of an ISMS based on ISO 27000, what does this situation primarily represent?

Accepted Answer

A threat

Answer

A risk

Answer

An asset

Answer

A control

Question 3

Which standard in the ISO 27000 family provides the overview, fundamental principles, and vocabulary for Information Security Management Systems (ISMS)?

Accepted Answer

ISO/IEC 27000

Answer

ISO/IEC 27001

Answer

ISO/IEC 27005

Answer

ISO/IEC 27002

Question 4

An organization's server room lacks a fire suppression system. According to the vocabulary of ISO 27000, this deficiency is best described as a(n):

Accepted Answer

Vulnerability

Answer

Impact

Answer

Threat

Answer

Risk

Question 5

What are the three core components of the CIA triad, as defined in ISO/IEC 27000, that an ISMS is designed to preserve?

Accepted Answer

Confidentiality, Integrity, and Availability

Answer

Control, Integrity, and Audit

Answer

Continuity, Information, and Assurance

Answer

Compliance, Integrity, and Administration

Question 6

Which of the following is the PRIMARY purpose of an Information Security Management System (ISMS) as described in the ISO 27000 series?

Accepted Answer

To establish, implement, maintain, and continually improve information security within an organization.

Answer

To implement the latest cybersecurity technology and software.

Answer

To guarantee that the organization will never experience a security breach.

Answer

To satisfy the requirements of a single, specific data protection regulation.