ISO-IEC-27002-Foundation問題集、PECB実際の試験問題

質問 1

An organization has set up a fire alarm. What type of control is this?

A. Detective and technical

B. Corrective and managerial

C. Preventive and legal

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which control addresses the need to establish and apply a process for managing technical vulnerabilities?

A. 8.16 Monitoring activities

B. 8.9 Configuration management

C. 8.8 Management of technical vulnerabilities

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

How can organizations manage the security of large networks?

A. By dividing networks into separate network domains and separating them from the public network

B. By dividing networks into separate network domains and including them into the public network

C. By avoiding the integration of information services, users, and information systems into large networks

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which of the following best describes "availability" as an information security principle?

A. Ensuring information is only seen by authorized parties

B. Ensuring information and assets are accessible and usable when needed by an authorized entity

C. Ensuring information has not been altered without authorization

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which control deals with the return of organizational assets upon termination or change of employment?

A. 5.10 Acceptable use of assets

B. 6.5 Responsibilities after termination or change of employment

C. 5.11 Return of assets

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

What does ISO/IEC 27002 provide?

A. Guidance for the management of information security risks

B. Guidance for the implementation of information security controls

C. Requirements for the implementation of information security controls

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which statement below describes the principle of confidentiality?

A. Property of accuracy and completeness

B. Property of being accessible and usable upon demand by an authorized entity

C. Property that information is not made available or disclosed to unauthorized individuals, entities, or processes

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which control specifically requires organizations to maintain contact with relevant authorities such as law enforcement or regulators?

A. 5.6 Contact with special interest groups

B. 5.7 Threat intelligence

C. 5.5 Contact with authorities

正解: C

解説: (PassTest メンバーにのみ表示されます)

PECB ISO/IEC 27002 Foundation - ISO-IEC-27002-Foundation 模擬練習