APMG-International ISO-IEC-27001-Foundation Dumps – 100% Cover Real Exam Questions (Updated 52 Questions) [Q29-Q46]

NEW QUESTION 29
Which audit activity related to ISO/IEC 27001 may be carried out by a practitioner?

NEW QUESTION 30
Identify the missing word in the following sentence.
According to ISO/IEC 27000, the definition of risk [?] is a “process to comprehend the nature of risk and to determine the level of risk.”

NEW QUESTION 31
What is the name of the control clause used to control information security breaches within Annex A of ISO
/IEC 27001?

NEW QUESTION 32
Which trend in information security performance is required to be considered during a management review of the ISMS?

NEW QUESTION 33
Which activity is a required element of information security risk identification?

NEW QUESTION 34
Which aspect of ISO/IEC 27001 requires that contractors know about the organization’s information security policies?

NEW QUESTION 35
Identify the missing word(s) in the following sentence.
When planning the ISMS, the organization is specifically required to plan actions to address risks and opportunities and how to [ ? ] these actions.

NEW QUESTION 36
To whom does the scope of the Terms and conditions of employment control apply?

NEW QUESTION 37
What is the definition of the term ‘integrity’ according to ISO/IEC 27000?

NEW QUESTION 38
Identify the missing word in the following sentence.
The organization shall determine the [ ? ] of interested parties relevant to information security.

NEW QUESTION 39
Identify the missing word(s) in the following sentence.
“Information security, cybersecurity and privacy protection – [ ? ]” is the title of ISO/IEC 27005.

NEW QUESTION 40
Which International Standard can be used to implement an integrated management system with ISO/IEC
27001?

NEW QUESTION 41
Which of the following statements about the relationship between ISO/IEC 27001 and ISO/IEC 27002 is true?
* ISO/IEC 27002 provides implementation advice on the controls selected during the ISO/IEC 27001 information security risk management process
* ISO/IEC 27002 provides a process for information security risk management which implements the requirements of ISO/IEC 27001

NEW QUESTION 42
What is required to be reported by the Information security event reporting control?

NEW QUESTION 43
What is a requirement for a corrective action made in response to a nonconformity?

NEW QUESTION 44
To whom are the information security policies required to be communicated, according to the control in Annex A of ISO/IEC 27001?

NEW QUESTION 45
Identify the missing words in the following sentence.
The organization shall establish, implement, maintain and [ ? ] an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.

NEW QUESTION 46
When are the information security policies required to be reviewed, according to the Policies for information security control?