Copy and Edit

ISO 27002 quiz part 1

Description

This is the first quiz about 27002
Diederik Merkens
Quiz by Diederik Merkens, updated more than 1 year ago
Diederik Merkens
Created by Diederik Merkens over 5 years ago
3832
0
0

Resource summary

Question 1

Question
What does the Information Security Policy describe?
Answer
  • which InfoSec-controls have been selected and taken
  • how the InfoSec-objectives will be reached
  • what the implementation-planning of the information security management system is
  • which Information Security-procedures are selected

Question 2

Question
In the context of contact with special interest groups, any information sharing agreements should identify requirements for the protection of [blank_start]confidential[blank_end] information.
Answer
  • topic-specific
  • public
  • confidential

Question 3

Question
Responsibilities for information security in projects should be defined and allocated to:
Answer
  • the project manager
  • specified roles defined in the used project management method of the organization
  • the InfoSec officer
  • the owner of the involved asset
  • the manager of the business domain in which the project is carried out

Question 4

Question
Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered
Answer
  • True
  • False

Question 5

Question
Prior to employment, [blank_start]screening[blank_end] as well as terms & conditions of employment are included as controls in ISO 27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.
Answer
  • screening
  • awareness training
  • trial period

Question 6

Question
It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle blowing”)
Answer
  • True
  • False

Question 7

Question
The identified owner of an asset is always an individual
Answer
  • True
  • False

Question 8

Question
Who is accountable to classify information assets?
Answer
  • the CEO
  • the CISO
  • the asset owner
  • the Information Security team

Question 9

Question
Physical labels and [blank_start]metadata[blank_end] are two common forms of labelling which are mentioned in ISO 27002.
Answer
  • data encryption
  • metadata
  • digital folders

Question 10

Question
What should be used to protect data on removable media if data confidentiality or integrity are important considerations?
Answer
  • backup on another removable medium
  • a password
  • logging
  • cryptographic techniques
Show full summary Hide full summary

Want to create your own Quizzes for free with GoConqr? Learn more.

Similar

Browse Library