ISO-IEC-27002-Foundation問題集、PECB実際の試験問題

質問 1

According to ISO/IEC 27002, which of the following statements is correct?

A. Supporting utilities should be tested only at the beginning of the process

B. Equipment is NOT affected by power failures or other disruptions

C. Equipment should be sited securely and protected to reduce the risks from environmental and physical threats

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which control should an organization implement to ensure that the software is written securely and the number of potential vulnerabilities in the software is reduced?

A. Control 8.26 Application security requirements

B. Control 8.28 Secure coding

C. Control 8.29 Security testing in development and acceptance

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which of the following controls aims to ensure the integrity of operational systems and prevent exploitation of technical vulnerabilities?

A. Control 8.15 Logging

B. Control 8.17 Clock synchronization

C. Control 8.19 Installation of software on operational systems

正解: C

質問 4

What does ISO/IEC 27002 provide?

A. Guidance for the management of information security risks

B. Guidance for the implementation of information security controls

C. Requirements for the implementation of information security controls

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

What, among others, should be considered when using cryptography?

A. The roles and responsibilities for the key management

B. Security checkpoints in projects

C. Restricting and filtering systems connection to the network

正解: A

解説: (PassTest メンバーにのみ表示されます)

PECB ISO/IEC 27002 Foundation - ISO-IEC-27002-Foundation 模擬練習