Online Access Free ISO-IEC-27002-Foundation Practice Test

What is the main objective of control 5.1 Policies for information security?

• A.To classify information according to sensitivity
• B.To ensure management direction and support for information security are provided
• C.To manage access rights of employees

When can clock synchronization be difficult?

• A.When using multiple cloud services
• B.When using only on-premises services
• C.Both

Which control requires organizations to identify and implement processes for managing information security risks associated with the use of supplier products or services?

• A.5.20 Addressing information security within supplier agreements
• B.5.19 Information security in supplier relationships
• C.5.21 Managing information security in the ICT supply chain

What is the primary purpose of control 5.29 Information security during disruption?

• A.To ensure the organization plans how to maintain information security during disruptive events
• B.To classify business continuity documentation
• C.To manage supplier contracts

Which of the following is an example of an organizational asset in cyberspace?

• A.Digital customer identity
• B.Medical data
• C.Intellectual property