ISO-IEC-27001-Foundation Exam Training Practice Tests (APMG-International ISO/IEC 27001 (2022) Foundation)]

Question 1

Which statement about the conduct of audits is true?

A. During Stage 1 of a certification audit, evidence is collected by observing activities B. The certificate issued after a successful re-certification audit in typical schemes lasts for one year C. Third party audits are conducted by a customer of the organization D. One of the focus areas for a surveillance audit is the output from internal audits and management reviews

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which activity is an operational planning and control requirement?

A. Document information security objectives B. Perform information security risk assessments at planned intervals C. Review the consequences of unintended changes D. Scheduling of second party audits

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Identify the missing word(s) in the following sentence.
"Information security, cybersecurity and privacy protection ?[ ? ]" is the title of ISO/IEC 27005.

A. Guidance on managing information security risks B. Information security controls C. Information security management systems ?Requirements D. Guidelines for information security management systems auditing

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which trend in information security performance is required to be considered during a management review of the ISMS?

A. Validity of information continuity controls B. Achievement of information security objectives C. Relevant external and internal requirements changes D. Decisions related to continual improvement opportunities

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which factor is required to be determined when understanding the organization and its context?

A. The information security objectives relevant to the ISMS B. The processes that will be required to operate the ISMS C. Internal issues affecting the purpose of the ISMS D. The ISO/IEC 27001 clauses which apply to the management system

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

What is a requirement for a corrective action made in response to a nonconformity?

A. They are proportionate to the likelihood of the nonconformity recurring B. They do NOT change the organization's information security policies C. They always eliminate the cause of the nonconformity D. They are appropriate to the effects of the nonconformity

Correct Answer: D

Question 7

Which statement describes a requirement of an internal audit programme?

A. The programme must consider the importance of the target processes B. The programme must use third party auditors to ensure impartiality C. Previous audit results are disregarded to ensure objectivity D. All processes must be audited within a 3-year cycle

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Which is a control title within Annex A of ISO/IEC 27001?

A. Protection of documents B. Change control C. Responsibilities and procedures D. Information security in supplier relationships

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

APMG-International ISO/IEC 27001 (2022) Foundation - ISO-IEC-27001-Foundation Exam Practice Test