Online Access Free ISO-IEC-27002-Foundation Practice Test

Which control specifically addresses secure disposal or re-use of equipment containing storage media?

• A.7.14 Secure disposal or re-use of equipment
• B.7.10 Storage media
• C.7.9 Security of assets off-premises

Some employees of an organization find the data processing procedures complicated and have been struggling to follow them effectively. Which of the following threats is the organization facing in this case?

• A.Information theft
• B.Hacking
• C.Data input error by employees

An organization does NOT authenticate the identity of persons that enter the server room, so unauthorized persons can easily gain access to the server. Which control of ISO/IEC 27002 should the organization implement to solve this problem?

• A.Control 8.4 Access source code
• B.Control 8.6 Capacity management
• C.Control 7.2 Physical entry

What is the main objective of control 5.1 Policies for information security?

• A.To ensure management direction and support for information security are provided
• B.To manage access rights of employees
• C.To classify information according to sensitivity

Which control addresses restrictions on the transfer of information between the organization and external parties?

• A.5.14 Information transfer
• B.5.16 Identity management
• C.5.15 Access control