ISO-IEC-27002-Foundationテストトレントは好評で、すべての献身で99％の合格率に達しました。多くの労働者がより高い自己改善を進めるための強力なツールとして、当社のISO-IEC-27002-Foundation認定トレーニングは、高度なパフォーマンスと人間中心のテクノロジーに対する情熱を追求し続けました。 ISO-IEC-27002-Foundation勉強のトレントを完全に理解するには、Webにアクセスするか、ISO-IEC-27002-Foundation試験の質問のデモを無料でダウンロードして、ISO-IEC-27002-Foundationトレーニングの質を試すためにWebShikenPASSで提供します。ガイド。
| Certification Vendor: | PECB |
|---|---|
| Exam Name: | ISO/IEC 27002 Foundation Exam |
| Exam Number: | ISO-IEC-27002-Foundation |
| Passing Score: | 28/40 (70%) |
| Exam Duration: | 60 minutes |
| Real Exam Qty: | 40 |
| Exam Format: | Online / Paper-based, Multiple Choice |
| Exam Price: | $150 USD (included in training fee) |
| Certificate Validity Period: | Lifetime |
| Available Languages: | Spanish, Czech, French, German, English |
| Related Certifications: | ISO/IEC 27001 Foundation ISO/IEC 27005 Foundation |
| Recommended Training: | PECB ISO/IEC 27002 Foundation Training Course |
| Exam Registration: | PECB Official Registration |
| Sample Questions: | PECB ISO-IEC-27002-Foundation Sample Questions |
| Exam Way: | Online proctored or onsite paper-based |
| Pre Condition: | No formal prerequisites; basic knowledge of information security is recommended |
| Official Syllabus URL: | https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27002/iso-iec-27002-foundation |
>> ISO-IEC-27002-Foundation勉強方法 <<
学習の重要性はよく知られており、誰もが忙しい蜂のように働いて、自分の理想のために苦労しています。私たちは学び、進歩し続け、私たちが望む人生を送ることができます。当社のISO-IEC-27002-Foundation模擬試験資料は、ユーザーがISO-IEC-27002-Foundation資格証明書を取得するための資格試験に合格するのに役立ちます。あなたが良い未来を楽しみにしていて、自分自身を要求している人なら、ISO-IEC-27002-Foundation試験に合格することを学ぶ軍隊に参加してください。 ISO-IEC-27002-Foundationテスト問題を選択すると、多くの予期しない結果が確実にもたらされます。
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
質問 # 19
Which control requires organizations to identify and implement processes for managing information security risks associated with the use of supplier products or services?
正解：B
解説：
Control 5.19 addresses the overall management of information security risks related to suppliers.
質問 # 20
What does ISO/IEC 27002 provide?
正解：A
解説：
ISO/IEC 27002:2022 provides guidance for selecting, implementing, and managing information security controls. It is not the certification requirements standard; that role belongs to ISO/IEC 27001. ISO/IEC 27002 supports organizations by explaining the purpose of each control, the implementation guidance, and other related information needed to apply controls appropriately. Its controls are grouped into organizational, people, physical, and technological themes. The standard is intended to be used as a reference when organizations design security measures based on their risks, business needs, legal obligations, contractual requirements, and information security objectives. Therefore, option A is correct because "guidance" is the core function of ISO/IEC 27002. Option B is incorrect because ISO/IEC 27002 does not set mandatory requirements for certification. Option C is related to risk management, but it is not the main purpose of ISO
/IEC 27002; risk management guidance is more directly associated with ISO/IEC 27005. ISO/IEC 27002 guides control implementation after risk and control needs are determined. References/Chapters: ISO/IEC
27002:2022, Clause 1 Scope; Clause 4 Structure of the standard; Controls 5-8.
質問 # 21
During which phase of the Plan-Do-Check-Act (PDCA) cycle organizations maintain and improve the information security management system (ISMS)?
正解：A
解説：
During the Act phase, the organization takes corrective and improvement actions to maintain and continually improve the ISMS.
質問 # 22
An organization does NOT authenticate the identity of persons that enter the server room, so unauthorized persons can easily gain access to the server. Which control of ISO/IEC 27002 should the organization implement to solve this problem?
正解：B
解説：
Control 7.2, Physical entry, is the correct control because the problem is unauthorized physical access to a server room. ISO/IEC 27002 expects secure areas to be protected by appropriate entry controls so that only authorized persons can enter. Authentication of identity at entry points may include badges, access cards, biometric verification, PINs, visitor registration, security guards, turnstiles, logs, escorts, or electronic access systems. The server room contains information processing facilities, and unauthorized physical access could lead to theft, tampering, cable disconnection, hardware compromise, installation of rogue devices, or direct access to consoles and storage media. Control 8.6, Capacity management, concerns resource capacity for information processing facilities, not physical access. Control 8.4, Access to source code, concerns protecting program source code from unauthorized access, not entry into a secure physical room. Because the scenario specifically says people can enter the server room without identity authentication, the matching ISO/IEC
27002 physical control is Control 7.2. References/Chapters: ISO/IEC 27002:2022, Control 7.2 Physical entry; Control 7.1 Physical security perimeter; Control 7.4 Physical security monitoring.
質問 # 23
In which group of controls does Control 7.9 Security of assets off-premises belong?
正解：C
解説：
Control 7.9, Security of assets off-premises, belongs to the physical control group. ISO/IEC 27002:2022 organizes controls into four themes: organizational controls, people controls, physical controls, and technological controls. Controls in Clause 7 are physical controls, and Control 7.9 specifically addresses protection of organizational assets when they are outside the organization's premises. This includes laptops, mobile devices, storage media, documents, portable equipment, and other assets used during travel, remote work, home working, customer visits, supplier sites, or field operations. Off-premises use increases physical risk because assets may be exposed to theft, loss, damage, unauthorized viewing, insecure storage, or uncontrolled environments. Although technological measures such as encryption and remote wipe may support this control, the control itself is placed in the physical theme because its focus is the secure handling and protection of assets outside controlled facilities. Option A is incorrect because organizational controls are in Clause 5. Option C is incorrect because technological controls are in Clause 8. References/Chapters: ISO
/IEC 27002:2022, Clause 7 Physical controls; Control 7.9 Security of assets off-premises; Clause 4 Structure of the standard.
質問 # 24
......
ISO-IEC-27002-Foundation科目対策: https://www.shikenpass.com/ISO-IEC-27002-Foundation-shiken.html