Free APMG-International ISO-IEC-27001-Foundation Exam Dumps Questions & Answers

Which of the following is an information asset?

• A.  Laptop computer
• B.  Employee database
• C.  Network cable
• D.  Office building

According to ISO/IEC 27000, what is the definition of a threat?

• A.  A weakness of an asset or control
• B.  A security control
• C.  A potential cause of an unwanted incident which can result in harm to a system or organization
• D.  The remaining risk after risk treatment

What international standard provides guidance on the integration of ISO/IEC 27001 and the IT Service Management standard?

• A.  ISO/IEC 20000-1
• B.  None of the above
• C.  ISO/IEC 27013
• D.  ISO/IEC 27002

What is the definition of the term `integrity' according to ISO/IEC 27000?

• A.  The property of availability and confidentiality
• B.  The property of being accessible and usable
• C.  The property that information is NOT made available inappropriately
• D.  The property of accuracy and completeness

Which statement describes a requirement of an internal audit programme?

• A.  The programme must consider the importance of the target processes
• B.  Previous audit results are disregarded to ensure objectivity
• C.  All processes must be audited within a 3-year cycle
• D.  The programme must use third party auditors to ensure impartiality