Free CertiProf I27001F Exam Dumps Questions & Answers

Which of the following options should be included in the ISMS policy?

• A.  The name of the intrusion detection system
• B.  The results of previous audits
• C.  The company history and the motivation for implementing the ISMS
• D.  The information security objectives

What are the three main aspects of information security?

• A.  Non-repudiation, authenticity, accountability
• B.  Confidentiality, integrity, availability
• C.  Confidentiality, recoverability, integrity
• D.  Durability, auditability, confidentiality

Which statement describes a critical success factor for an Information Security Management System ISMS?

• A.  Appointing at least two internal auditors for the information security system
• B.  Performing a second-party audit
• C.  Hiring an information security coordinator
• D.  Implementing a measurement system used to evaluate information security management performance and provide suggestions for improvement

According to ISO/IEC 27001:2022, who is required to carry out the ISMS review to ensure its suitability, adequacy, and effectiveness?

• A.  The external certification audit company
• B.  Process owners
• C.  The internal audit team
• D.  Top management

According to ISO/IEC 27001:2022, is it necessary to ensure that successive information security risk assessments produce consistent, valid, and comparable results?

• A.  None of the above
• B.  It is a recommendation, but not a requirement
• C.  It is only an observation to keep in mind when auditing the management system
• D.  It is a requirement to be fulfilled