Which of the following is the PRIMARY purpose of International Organization for Standardization (ISO)
27001?

• A.To enable organizations that adopt it to obtain certifications
• B.Implementation of business-enabling information security
• C.Use within an organization to formulate security requirements and objectives
• D.Use within an organization to ensure compliance with laws and regulations

Comment: *

Name: *

Email: *

Verification: *

Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
When multiple regulations or standards apply to your industry you should set controls to meet the:

• A.Stricter regulation or standard
• B.Recommendations of your Legal Staff
• C.Easiest regulation or standard to implement
• D.Most complex standard to implement

Comment: *

Name: *

Email: *

Verification: *

Annual Loss Expectancy is derived from the function of which two factors?

• A.Annual Rate of Occurrence and Single Loss Expectancy
• B.Safeguard Value and Annual Rate of Occurrence
• C.Annual Rate of Occurrence and Asset Value
• D.Single Loss Expectancy and Exposure Factor

Comment: *

Name: *

Email: *

Verification: *

At which point should the identity access management team be notified of the termination of an employee?

• A.Before an audit
• B.At the end of the day once the employee is off site
• C.Immediately so the employee account(s) can be disabled
• D.During the monthly review cycle

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be determined while defining risk management strategies?

• A.Enterprise disaster recovery plans
• B.IT architecture complexity
• C.Organizational objectives and risk tolerance
• D.Risk assessment criteria

Comment: *

Name: *

Email: *

Verification: *