Free APMG-International ISO-IEC-27001-Foundation Exam Dumps Questions & Answers

When are the information security policies required to be reviewed, according to the Policies for information security control?

• A.At planned intervals and if significant changes occur
• B.Annually
• C.Every six months
• D.According to a schedule defined by the Certification Body

Which action must top management take to provide evidence of its commitment to the establishment, operation and improvement of the ISMS?

• A.Producing a risk assessment report
• B.Communicating feedback from interested parties to the organization
• C.Implementing the actions from internal audits
• D.Ensuring information security objectives are established

What is continual improvement in an ISMS mainly based on?

• A.Software updates
• B.Customer complaints only
• C.Annual budgeting
• D.The Plan-Do-Check-Act (PDCA) cycle

What is the definition of the term `integrity' according to ISO/IEC 27000?

• A.The property of being accessible and usable
• B.The property that information is NOT made available inappropriately
• C.The property of accuracy and completeness
• D.The property of availability and confidentiality

Which of the following is required to be considered when selecting appropriate information security risk treatment options?

• A.Only risk controls in Annex A of ISO/IEC 27001
• B.Criteria for accepting identified risks
• C.Only risk controls in ISO/IEC 27002
• D.Criteria for performing risk assessments