ISO/IEC 27001 fromData Perspective — Learn free

Self-check

Questions 1–10 of 10

1. What does ISO/IEC 27001 specify?
Question 1A. Rules for financial reportingB. The requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS)C. A programming standard for SQLD. A file format for data exchangeE. A licence for cloud software
2. What does the CIA triad refer to in the context of ISO/IEC 27001?
Question 2A. Cost, integration and automationB. Compliance, inspection and auditingC. Confidentiality, integrity and availability of dataD. Classification, incident and accessE. Continuity, insurance and assurance
3. What is described as the foundational aspect of ISO/IEC 27001?
Question 3A. Purchasing encryption hardwareB. Appointing a chief executiveC. Migrating data to the cloudD. The systematic assessment of information security risksE. Publishing a privacy notice
4. What is the purpose of data classification under ISO/IEC 27001?
Question 4A. To sort data alphabetically for retrievalB. To decide which database vendor to useC. To assign storage tiers by file sizeD. To group data by department for billingE. To classify data by sensitivity and importance so that more sensitive data receives higher levels of protection
5. On which principle does ISO/IEC 27001 base the limiting of access to data?
Question 5A. The principle of least privilegeB. The principle of open accessC. The principle of shared passwordsD. The principle of seniorityE. The principle of first come, first served
6. Which control makes data unreadable to unauthorised parties, both at rest and in transit?
Question 6A. Data classificationB. EncryptionC. Risk assessmentD. Business continuity planningE. Incident reporting
7. What does incident management under ISO/IEC 27001 include?
Question 7A. Classifying data by sensitivityB. Negotiating supplier contractsC. Detecting, reporting and investigating information security incidents to mitigate their impact and prevent recurrenceD. Scheduling database backupsE. Training staff in SQL
8. What does Business Continuity Management ensure under ISO/IEC 27001?
Question 8A. That all staff receive annual bonusesB. That the organisation never changes suppliersC. That data is deleted after seven yearsD. That critical data remains available or can be restored after a disruption such as a cyber-attack or natural disasterE. That marketing campaigns continue during outages
9. Which role leads the development and implementation of the ISMS?
Question 9A. Database AdministratorB. Marketing ManagerC. Platform OwnerD. Data ScientistE. Information Security Officer
10. Which of the following is NOT one of the key data-related components of ISO/IEC 27001 described?
Question 10A. Marketing attribution modellingB. Risk assessmentC. Data classificationD. Access controlE. Business Continuity Management