ISO-IEC-27002-Foundation 試験問題を無料オンラインアクセス

How can organizations manage the security of large networks?

• A.By dividing networks into separate network domains and including them into the public network
• B.By dividing networks into separate network domains and separating them from the public network
• C.By avoiding the integration of information services, users, and information systems into large networks

What is the main purpose of Control 5.12 Classification of information of ISO/IEC 27002?

• A.To ensure identification and understanding of protection needs of information based on its importance
• B.To ensure authorized access and prevent unauthorized access to information
• C.To facilitate the communication of classification of information and support automation of information processing and management

An organization has established and maintains contact with special interest groups with which it shares and obtains information about security threats, vulnerabilities, trends, etc. Based on ISO/IEC 27002, is this a good practice?

• A.No, organizations should share such information only with the authorities
• B.No, organizations should avoid sharing or exchanging information about new threats or vulnerabilities
• C.Yes, it is recommended for organizations to establish and maintain contact with special interest groups regarding security threats, trends, etc.

An organization does NOT authenticate the identity of persons that enter the server room, so unauthorized persons can easily gain access to the server. Which control of ISO/IEC 27002 should the organization implement to solve this problem?

• A.Control 7.2 Physical entry
• B.Control 8.6 Capacity management
• C.Control 8.4 Access to source code

Which control of ISO/IEC 27002 aims to ensure the correct and secure operation of information processing facilities?

• A.Control 7.2 Physical entry
• B.Control 5.37 Documented operating procedures
• C.Control 5.35 Independent review of information security