PECBのISO-IEC-27002-Foundation認証試験はIT業界にとても重要な地位があることがみんなが、たやすくその証本をとることはではありません。いまの市場にとてもよい問題集が探すことは難しいです。CertShikenは認定で優秀なIT資料のウエブサイトで、ここでPECB ISO-IEC-27002-Foundation認定試験「ISO/IEC 27002 Foundation Exam」の先輩の経験と暦年の試験の材料を見つけることができるとともに部分の最新の試験の題目と詳しい回答を無料にダウンロードこともできますよ。
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Fundamental Principles and Concepts of Information Security, Cybersecurity and Privacy | 50% | - Relationship between ISO/IEC 27001, ISO/IEC 27002 and related standards - Threats, vulnerabilities, risks and risk management concepts - Core principles: confidentiality, integrity, availability |
| Topic 2: Information Security Controls based on ISO/IEC 27002 | 50% | - People controls - Physical controls - Organizational controls - Technological controls |
>> ISO-IEC-27002-Foundation日本語版サンプル <<
当社PECBのISO-IEC-27002-Foundationガイド急流は、過去の試験論文と業界での人気の傾向に基づいて、厳密な分析と要約を行っており、改訂および更新されています。 ISO-IEC-27002-Foundation試験問題により、洗練された概念が簡素化されました。このソフトウェアは、さまざまな自己学習および自己評価機能を強化して、学習結果を確認します。 ISO-IEC-27002-Foundationテストトレントのソフトウェアは、統計レポート機能を提供し、学生が脆弱なリンクを見つけて対処するのに役立ちます。 ISO-IEC-27002-Foundation試験問題のこのバージョンを使用すると、試験に簡単に合格することができます。
質問 # 36
In which group of controls does Control 5.7 Threat intelligence belong?
正解：B
解説：
Control 5.7, Threat intelligence, belongs to the organizational control group. ISO/IEC 27002:2022 organizes controls by clauses: Clause 5 contains organizational controls, Clause 6 contains people controls, Clause 7 contains physical controls, and Clause 8 contains technological controls. Threat intelligence is classified as organizational because it supports governance, decision-making, risk awareness, planning, prioritization, and security strategy across the organization. It involves collecting, analyzing, and using information about existing or emerging threats so the organization can reduce risk and improve controls. Threat intelligence can influence vulnerability management, incident response, monitoring, supplier risk management, awareness training, security architecture, and risk treatment plans. Although threat intelligence may use technological tools, its ISO/IEC 27002 placement is organizational because its primary purpose is to guide security decisions and readiness. Option A is incorrect because technological controls are Clause 8. Option B is incorrect because people controls are Clause 6. The verified answer is option C. References/Chapters: ISO
/IEC 27002:2022, Clause 5 Organizational controls; Control 5.7 Threat intelligence; Clause 4 Structure of the standard.
質問 # 37
Which control specifically addresses secure disposal or re-use of equipment containing storage media?
正解：B
解説：
Control 7.14 ensures that all items of equipment containing storage media are verified to have sensitive data and licensed software removed or securely overwritten before disposal or re-use.
質問 # 38
What is the purpose of Control 8.20 Network security of ISO/IEC 27002?
正解：C
解説：
The purpose of Control 8.20, Network security, is to protect information in networks and supporting information processing facilities from compromise through the network. This includes protecting data in transit, network devices, network services, communication paths, routing, management interfaces, and connected systems. Network compromise can lead to unauthorized access, interception, malware propagation, denial of service, lateral movement, data exfiltration, or manipulation of traffic. Option B relates more closely to Control 8.21, Security of network services, which addresses security mechanisms, service levels, and management requirements for network services. Option C relates to Control 8.22, Segregation of networks, which specifically concerns splitting networks into security boundaries or domains. Control 8.20 is broader: it establishes the general objective of securing networks against compromise. ISO/IEC 27002 expects organizations to manage and control networks according to risk, including architecture, monitoring, authentication, encryption where needed, device hardening, and protection of network management functions.
The correct answer is therefore option A. References/Chapters: ISO/IEC 27002:2022, Control 8.20 Network security; Control 8.21 Security of network services; Control 8.22 Segregation of networks.
質問 # 39
What should NOT be taken into account of when locating and constructing physical premises?
正解：A
解説：
Physical premises should be located and constructed considering environmental and external factors, such as local topography and urban threats. System requirements are not a primary physical-site consideration.
質問 # 40
What should the organization do with regard to the information security roles and responsibilities of an employee who is leaving or changing the job role?
正解：B
解説：
When an employee leaves the organization or changes roles, their information security responsibilities should be identified and transferred appropriately. ISO/IEC 27002 emphasizes that responsibilities must remain clear throughout the employment lifecycle, including changes and termination. Security duties cannot simply disappear when a person leaves a role. Examples include ownership of assets, approval duties, incident response responsibilities, privileged access administration, supplier contact responsibilities, classification decisions, or operational security tasks. The organization should determine which responsibilities the employee holds, remove responsibilities that no longer apply, revoke or adjust access rights, and assign continuing responsibilities to another competent person. Option B is too limited because documenting responsibilities in a termination policy does not ensure that active duties are transferred. Option C is incorrect because outsourcing is not required and may introduce additional supplier risk. The central ISO/IEC 27002 principle is continuity of accountability: responsibilities must be maintained even when personnel move, leave, or change duties. This also supports least privilege because access and responsibilities should match the current role. References/Chapters: ISO/IEC 27002:2022, Control 6.5 Responsibilities after termination or change of employment; Control 5.2 Information security roles and responsibilities; Control 5.18 Access rights.
質問 # 41
......
ISO-IEC-27002-Foundation認定の取得を支援するために、多くの専門家が数年間、PECBすべての試験官向けのISO-IEC-27002-Foundation試験トレントを策定するために懸命に取り組んできました。CertShiken このようにして、当社のISO-IEC-27002-Foundation学習資料は、対象となるだけでなく、すべての知識ポイントを網羅しています。 ISO-IEC-27002-Foundation練習教材には、ISO-IEC-27002-Foundation練習教材の学習プロセスの欠陥を見つけるのに役立つ統計分析機能もあるため、弱いリンクのISO/IEC 27002 Foundation Examトレーニングを強化できます。 このようにして、能力が向上したため、成功に自信を持つことができます。
ISO-IEC-27002-Foundation専門知識訓練: https://www.certshiken.com/ISO-IEC-27002-Foundation-shiken.html