Free APMG-International ISO-IEC-27001-Foundation Exam Dumps Questions & Answers

Who determines the number of days required for a certification audit?

• A.  Both the management representative and the external auditor together
• B.  The management representative from the organization to be audited
• C.  The lead internal auditor from the organization to be audited
• D.  The external auditor from the Certification Body who will undertake the audit

What is the definition of a threat according to ISO/IEC 27000?

• A.  A weakness of an asset or a control that can be exploited
• B.  The risk remaining after risk treatment
• C.  A single or a series of unwanted or unexpected information security events
• D.  A potential cause of an unwanted incident which can result in harm to a system or organization

Which aspect of ISO/IEC 27001 requires that contractors know about the organization's information security policies?

• A.  Nonconformity and corrective action
• B.  Competence
• C.  Communication
• D.  Awareness

What international standard provides guidance on the integration of ISO/IEC 27001 and the IT Service Management standard?

• A.  ISO/IEC 27002
• B.  ISO/IEC 20000-1
• C.  None of the above
• D.  ISO/IEC 27013

Which statement is a factor that will influence the implementation of the information security management system?

• A.  The ISMS will be operated as an independent process within the organization
• B.  The ISMS will be separate from the organization's overall management structure
• C.  The ISMS will encompass all controls specified within ISO/IEC 27001
• D.  The ISMS will be scaled to the controls according to the needs of the organization