ISO27-13-001 試験問題を無料オンラインアクセス

What is an example of a human threat?

• A.a lightning strike
• B.thunderstrom
• C.phishing
• D.fire

You receive an E-mail from some unknown person claiming to be representative of your bank and asking for your account number and password so that they can fix your account. Such an attempt of social engineering is called

• A.Spoofing
• B.Shoulder Surfing
• C.Mountaineering
• D.Phishing

Who are allowed to access highly confidential files?

• A.Employees with a business need-to-know
• B.Contractors with a business need-to-know
• C.Employees with signed NDA have a business need-to-know
• D.Non-employees designated with approved access and have signed NDA

What is the purpose of an Information Security policy?

• A.An information security policy provides direction and support to the management regarding information security
• B.An information security policy makes the security plan concrete by providing the necessary details
• C.An information security policy provides insight into threats and the possible consequences
• D.An information security policy documents the analysis of risks and the search for countermeasures

You have a hard copy of a customer design document that you want to dispose off. What would you do

• A.Shred it using a shredder
• B.Give it to the office boy to reuse it for other purposes
• C.Throw it in any dustbin
• D.Be environment friendly and reuse it for writing