To pass the PECB ISO-IEC-27002-Foundation exam on the first try, candidates need ISO/IEC 27002 Foundation Exam updated practice material. Preparing with real ISO-IEC-27002-Foundation exam questions is one of the finest strategies for cracking the exam in one go. Students who study with PECB ISO-IEC-27002-Foundation Real Questions are more prepared for the exam, increasing their chances of succeeding. Finding original and latest ISO-IEC-27002-Foundation exam questions however, is a difficult process. Candidates require assistance finding the ISO-IEC-27002-Foundation updated questions.
| Certification Vendor: | PECB |
|---|---|
| Exam Name: | ISO/IEC 27002 Foundation Exam |
| Exam Number: | ISO-IEC-27002-Foundation |
| Real Exam Qty: | 40 |
| Exam Format: | Multiple Choice, Online / Paper-based |
| Related Certifications: | ISO/IEC 27001 Foundation ISO/IEC 27005 Foundation |
| Available Languages: | Czech, German, French, English, Spanish |
| Exam Duration: | 60 minutes |
| Passing Score: | 28/40 (70%) |
| Exam Price: | $150 USD (included in training fee) |
| Certificate Validity Period: | Lifetime |
| Recommended Training: | PECB ISO/IEC 27002 Foundation Training Course |
| Exam Registration: | PECB Official Registration |
| Sample Questions: | PECB ISO-IEC-27002-Foundation Sample Questions |
| Exam Way: | Online proctored or onsite paper-based |
| Pre Condition: | No formal prerequisites; basic knowledge of information security is recommended |
| Official Syllabus URL: | https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27002/iso-iec-27002-foundation |
>> ISO-IEC-27002-Foundation Latest Exam Camp <<
Before you take the exam, you only need to spend 20 to 30 hours to practice, so you can schedule time to balance learning and other things. Of course, you care more about your passing rate. We will provide you with three different versions. The PDF version allows you to download our ISO-IEC-27002-Foundation quiz prep. After you download the PDF version of our learning material, you can print it out. In this way, even if you do not have a computer, you can learn our ISO-IEC-27002-Foundation Quiz prep. We believe that it will be more convenient for you to take notes. Our website is a very safe and regular platform. You can download our ISO-IEC-27002-Foundation exam guide with assurance. You can take full advantage of the fragmented time to learn, and eventually pass the authorization of ISO-IEC-27002-Foundation exam.
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 40
Which control of ISO/IEC 27002 aims to ensure the correct and secure operation of information processing facilities?
Answer: A
Explanation:
Control 5.37, Documented operating procedures, aims to ensure the correct and secure operation of information processing facilities. Operating procedures translate security and operational requirements into repeatable instructions for administrators, operators, support teams, and users. They can cover system startup and shutdown, backup, restoration, logging, error handling, media handling, job scheduling, maintenance, incident escalation, access administration, and secure processing steps. Without documented procedures, operations become inconsistent and dependent on individual memory or informal practice, increasing the likelihood of mistakes, outages, unauthorized changes, or insecure handling. Control 7.2, Physical entry, protects secure physical areas by controlling access to facilities, but it does not define operational procedures.
Control 5.35, Independent review of information security, assesses whether the information security approach remains suitable, adequate, and effective, but it does not provide the day-to-day operating instructions. ISO
/IEC 27002 places documented procedures in the organizational control group because reliable operation requires governance, clarity, and repeatability. Therefore, option B is the verified answer. References
/Chapters: ISO/IEC 27002:2022, Control 5.37 Documented operating procedures; Control 7.2 Physical entry; Control 5.35 Independent review of information security.
NEW QUESTION # 41
Company A has configured its employees' browsers to block the IP address of malicious websites. Which information security control has been implemented by Company A?
Answer: A
Explanation:
Company A has implemented Control 8.23, Web filtering. Web filtering is intended to protect systems from compromise by preventing access to known malicious or inappropriate web resources. Blocking IP addresses or domains associated with malicious websites is a typical web filtering technique. It can reduce exposure to malware, phishing pages, command-and-control infrastructure, drive-by downloads, credential harvesting, and unauthorized content. Control 8.11, Data masking, is unrelated because it protects sensitive data by obscuring or substituting values so users or systems do not see the original data. Control 5.18, Access rights, concerns granting, reviewing, modifying, and removing user access privileges to information and systems. Browser configuration that blocks malicious destinations is not primarily user access rights management; it is filtering web traffic based on destination risk. ISO/IEC 27002 places web filtering under technological controls because it is implemented through browsers, gateways, DNS filtering, proxies, endpoint tools, or secure web gateways. Therefore, option B is verified. References/Chapters: ISO/IEC 27002:2022, Control 8.23 Web filtering; Control 8.7 Protection against malware; Control 8.20 Network security.
==========
NEW QUESTION # 42
What should the organization do with regard to the information security roles and responsibilities of an employee who is leaving or changing the job role?
Answer: C
Explanation:
The organization should ensure that information security responsibilities are reassigned appropriately when an employee leaves or changes roles, preventing gaps in accountability.
NEW QUESTION # 43
When can clock synchronization be difficult?
Answer: B
Explanation:
Different cloud services may use separate time sources and configurations, making consistent clock synchronization more difficult.
NEW QUESTION # 44
Which situation presented below indicates that the confidentiality of information has been breached?
Answer: A
Explanation:
Confidentiality is breached when information is made available or disclosed to unauthorized individuals, entities, or processes. Option A is the correct answer because employees from all departments have access to colleagues' personal data, even though such access should normally be restricted to authorized roles such as HR, payroll, compliance, or designated management. Internal users can still be unauthorized users when their role does not justify access. ISO/IEC 27002 addresses this through access control, access rights management, classification, privacy protection, and information access restriction. Option B is an availability issue because a department cannot access needed customer phone numbers due to equipment failure. Option C is an integrity issue because banking information was accidentally modified. The confidentiality principle is specifically about limiting disclosure and availability of information to authorized parties only. Personal data requires additional care because privacy obligations may apply, and excessive internal access can create legal, ethical, and reputational harm. The verified answer is therefore option A. References/Chapters: ISO/IEC
27002:2022, Control 5.15 Access control; Control 5.18 Access rights; Control 5.34 Privacy and protection of PII; Control 8.3 Information access restriction.
NEW QUESTION # 45
......
ISO-IEC-27002-Foundation Online Version: https://www.torrentexam.com/ISO-IEC-27002-Foundation-exam-latest-torrent.html