ITDumpsKR의 제품들은 모두 우리만의 거대한IT업계엘리트들로 이루어진 그룹 즉 관련업계예서 권위가 있는 전문가들이 자기만의 지식과 지금까지의 경험으로 최고의 IT인증관련자료를 만들어냅니다. ITDumpsKR의 문제와 답은 정확도 적중률이 아주 높습니다. 우리의 덤프로 완벽한PECB인증ISO-IEC-27002-Foundation시험대비를 하시면 되겠습니다. 이렇게 어려운 시험은 우리PECB인증ISO-IEC-27002-Foundation덤프로 여러분의 고민과 꿈을 한방에 해결해드립니다.
| Certification Vendor: | PECB |
|---|---|
| Exam Name: | ISO/IEC 27002 Foundation Exam |
| Exam Number: | ISO-IEC-27002-Foundation |
| Available Languages: | German, French, Spanish, English, Czech |
| Related Certifications: | ISO/IEC 27001 Foundation ISO/IEC 27005 Foundation |
| Real Exam Qty: | 40 |
| Exam Price: | $150 USD (included in training fee) |
| Certificate Validity Period: | Lifetime |
| Exam Duration: | 60 minutes |
| Passing Score: | 28/40 (70%) |
| Exam Format: | Multiple Choice, Online / Paper-based |
| Recommended Training: | PECB ISO/IEC 27002 Foundation Training Course |
| Exam Registration: | PECB Official Registration |
| Sample Questions: | PECB ISO-IEC-27002-Foundation Sample Questions |
| Exam Way: | Online proctored or onsite paper-based |
| Pre Condition: | No formal prerequisites; basic knowledge of information security is recommended |
| Official Syllabus URL: | https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27002/iso-iec-27002-foundation |
>> ISO-IEC-27002-Foundation최고덤프샘플 <<
ITDumpsKR는 자격증 응시자에게PECB ISO-IEC-27002-Foundation 시험 준비를 위한 현재 그리고 가장 최근의 자료들을 제공하는 이 산업 영역의 리더입니다. ITDumpsKR는PECB ISO-IEC-27002-Foundation덤프를 시험문제변경에 따라 계속 갱신하여 고객님께서 받은 것이PECB ISO-IEC-27002-Foundation 시험의 가장 최신 기출문제임을 보증해드립니다.
| 주제 | 소개 |
|---|---|
| 주제 1 |
|
| 주제 2 |
|
| 주제 3 |
|
질문 # 66
An organization uses an access control software that allows only authorized employees to access sensitive files. What type of control is this?
정답：A
설명：
Access control software that allows only authorized employees to access sensitive files is a preventive control.
Its purpose is to stop unauthorized access before it occurs by enforcing approved access rules. In ISO/IEC
27002, access control is implemented through policies, identity management, authentication, authorization, access rights review, privileged access control, and restrictions on information access. This type of software can prevent unauthorized disclosure, unauthorized modification, misuse of sensitive data, and violation of privacy or contractual obligations. It is not primarily detective because it does not merely discover an event after it has happened. It is not corrective because it does not restore damaged information or reverse the impact of an incident. Its security value is in blocking access attempts that do not meet authorization criteria.
The principle behind the control is least privilege: users should receive only the access necessary for their role and responsibilities. For sensitive files, this is especially important because confidentiality, integrity, and accountability depend on correct authorization. References/Chapters: ISO/IEC 27002:2022, Control 5.15 Access control; Control 5.16 Identity management; Control 5.18 Access rights; Control 8.3 Information access restriction.
질문 # 67
What is the purpose of control 5.9 Inventory of information and other associated assets?
정답：B
설명：
An inventory of assets helps the organization understand what needs to be protected and assign ownership and protection responsibilities accordingly.
질문 # 68
What does ISO/IEC 27002 provide?
정답：A
설명：
ISO/IEC 27002:2022 provides guidance for selecting, implementing, and managing information security controls. It is not the certification requirements standard; that role belongs to ISO/IEC 27001. ISO/IEC 27002 supports organizations by explaining the purpose of each control, the implementation guidance, and other related information needed to apply controls appropriately. Its controls are grouped into organizational, people, physical, and technological themes. The standard is intended to be used as a reference when organizations design security measures based on their risks, business needs, legal obligations, contractual requirements, and information security objectives. Therefore, option A is correct because "guidance" is the core function of ISO/IEC 27002. Option B is incorrect because ISO/IEC 27002 does not set mandatory requirements for certification. Option C is related to risk management, but it is not the main purpose of ISO
/IEC 27002; risk management guidance is more directly associated with ISO/IEC 27005. ISO/IEC 27002 guides control implementation after risk and control needs are determined. References/Chapters: ISO/IEC
27002:2022, Clause 1 Scope; Clause 4 Structure of the standard; Controls 5-8.
질문 # 69
Which of the following controls aims to protect the production environment and data?
정답：A
설명：
Control 8.31, Separation of development, testing and operational environments, aims to protect the production environment and production data from unauthorized or inappropriate change, exposure, or disruption.
Development and testing activities often involve code changes, debugging, experimental configurations, test accounts, incomplete controls, and simulated transactions. If these activities occur directly in production, they can compromise confidentiality, integrity, and availability. Separation reduces the risk that untested software, test data, developer privileges, or debugging tools affect live systems and real business information. Control
5.13, Labelling of information, supports correct handling by communicating classification and protection needs, but it does not specifically protect production environments. Control 6.6, Confidentiality or non- disclosure agreements, supports legal and people-related confidentiality commitments, but it does not directly separate technical environments. The exam logic focuses on the control whose stated purpose is to protect production systems and data from risks introduced by development and testing. Therefore, option B is correct.
References/Chapters: ISO/IEC 27002:2022, Control 8.31 Separation of development, testing and operational environments; Control 8.32 Change management; Control 8.29 Security testing in development and acceptance.
질문 # 70
What is the purpose of control 8.20 Network security of ISO/IEC 27002?
정답：A
설명：
Control 8.20 focuses on securing networks and related processing facilities against unauthorized access, misuse, and other network-based threats.
질문 # 71
......
ISO-IEC-27002-Foundation인기자격증: https://www.itdumpskr.com/ISO-IEC-27002-Foundation-exam.html