GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

ISO 27002 quiz part 1

Diederik Merkens 10 questions 3,847 views Updated 17 Apr 2020

Take the quiz

This quiz has question types that open in the usual player.

Questions in this quiz (10)

  1. 1What does the Information Security Policy describe?
    1. Awhich InfoSec-controls have been selected and taken
    2. Bhow the InfoSec-objectives will be reached
    3. Cwhat the implementation-planning of the information security management system is
    4. Dwhich Information Security-procedures are selected
  2. 2In the context of contact with special interest groups, any information sharing agreements should identify requirements for the protection of [blank_start]confidential[blank_end] information.
    1. Atopic-specific
    2. Bpublic
    3. Cconfidential
  3. 3Responsibilities for information security in projects should be defined and allocated to:
    1. Athe project manager
    2. Bspecified roles defined in the used project management method of the organization
    3. Cthe InfoSec officer
    4. Dthe owner of the involved asset
    5. Ethe manager of the business domain in which the project is carried out
  4. 4Organizations allowing teleworking activities, the physical security of the building and the local environment of the teleworking site should be considered
    1. ATrue
    2. BFalse
  5. 5Prior to employment, [blank_start]screening[blank_end] as well as terms & conditions of employment are included as controls in ISO 27002 to ensure that employees and contractors understand their responsibilities and are suitable for the roles for which they are considered.
    1. Ascreening
    2. Bawareness training
    3. Ctrial period
  6. 6It is allowed that employees and contractors are provided with an anonymous reporting channel to report violations of information security policies or procedures (“whistle blowing”)
    1. ATrue
    2. BFalse
  7. 7The identified owner of an asset is always an individual
    1. ATrue
    2. BFalse
  8. 8Who is accountable to classify information assets?
    1. Athe CEO
    2. Bthe CISO
    3. Cthe asset owner
    4. Dthe Information Security team
  9. 9Physical labels and [blank_start]metadata[blank_end] are two common forms of labelling which are mentioned in ISO 27002.
    1. Adata encryption
    2. Bmetadata
    3. Cdigital folders
  10. 10What should be used to protect data on removable media if data confidentiality or integrity are important considerations?
    1. Abackup on another removable medium
    2. Ba password
    3. Clogging
    4. Dcryptographic techniques

Information

Description
This is the first quiz about 27002
Language
English
Views
3,847
History
Created on 16 Apr 2020 · updated on 17 Apr 2020
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?