Which of the following is NOT part of the steps required by ISO/IEC 27001 that an organization must take when a nonconformity is detected?

• A.React to the nonconformity, take action to control and correct it. and deal with its consequences
• B.Evaluate the need for action to eliminate the causes of the nonconformity so that it does not recur or occur elsewhere
• C.Communicate the details of the nonconformity to every employee of the organization and suspend the employee that caused the nonconformity

Comment: *

Name: *

Email: *

Verification: *

What should be used to protect data on removable media ifdata confidentiality or integrity are important considerations?

• A.logging
• B.cryptographic techniques
• C.a password
• D.backup on another removable medium

Comment: *

Name: *

Email: *

Verification: *

You apply for a position in another company and get the job. Along with your contract, you are asked to sign a code of conduct. What is a code of conduct?

• A.A code ofconduct specifies how employees are expected to conduct themselves and is the same for all companies.
• B.A code of conduct is a standard part of a labor contract.
• C.A code of conduct differs from company to company and specifies, among other things, the rules of behavior with regard to the usage of information systems.

Comment: *

Name: *

Email: *

Verification: *

What is the main purpose of Annex A 7.1 Physical security perimeters of ISO/IEC 27001?

• A.To prevent unauthorized physical access, damage, and interference to the organization's information and other associated assets
• B.To maintain the confidentiality of information that is accessible by personnel or external parties
• C.To ensure access to information and other associated assets is defined and authorized

Comment: *

Name: *

Email: *

Verification: *

Scenario 5: Operaze is a small software development company that develops applications for various companies around the world. Recently, the company conducted a risk assessment to assess the information security risks that could arise from operating in a digital landscape. Using different testing methods, including penetration Resting and code review, the company identified some issues in its ICT systems, including improper user permissions, misconfigured security settings, and insecure network configurations. To resolve these issues and enhance information security, Operaze decided to implement an information security management system (ISMS) based on ISO/IEC 27001.
Considering that Operaze is a small company, the entire IT team was involved in the ISMS implementation project. Initially, the company analyzed the business requirements and the internal and external environment, identified its key processes and activities, and identified and analyzed the interested parties In addition, the top management of Operaze decided to Include most of the company's departments within the ISMS scope. The defined scope included the organizational and physical boundaries. The IT team drafted an information security policy and communicated it to all relevant interested parties In addition, other specific policies were developed to elaborate on security issues and the roles and responsibilities were assigned to all interested parties.
Following that, the HR manager claimed that the paperwork created by ISMS does not justify its value and the implementation of the ISMS should be canceled However, the top management determined that this claim was invalid and organized an awareness session to explain the benefits of the ISMS to all interested parties.
Operaze decided to migrate Its physical servers to their virtual servers on third-party infrastructure. The new cloud computing solution brought additional changes to the company Operaze's top management, on the other hand, aimed to not only implement an effective ISMS but also ensure the smooth running of the ISMS operations. In this situation, Operaze's top management concluded that the services of external experts were required to implement their information security strategies. The IT team, on the other hand, decided to initiate a change in the ISMS scope and implemented the required modifications to the processes of the company.
Based on scenario 5. which committee should Operaze create to ensure the smooth running of the ISMS?

• A.Information security committee
• B.Management committee
• C.Operational committee

Comment: *

Name: *

Email: *

Verification: *