ISO 27001 MCQs

What is the primary objective of ISO 27001?

• To manage financial risks

• To protect information security

• To improve software development

• To enhance customer service

Which framework does ISO 27001 follow?

• Plan-Do-Check-Act (PDCA)

• Agile Methodology

• DevSecOps

• Waterfall Model

What does ISMS stand for in ISO 27001?

• Information Security Management System

• Information System Management Strategy

• Information Security Manual System

• IT Security Maintenance Standard

What is the scope of ISO 27001?

• Only IT infrastructure

• Only software security

• Organization-wide security management

• Only network security

Which of the following is NOT a key component of ISO 27001?

• Risk assessment

• Continuous improvement

• Network infrastructure

• Security controls

What is the purpose of the Statement of Applicability (SOA) in ISO 27001?

• To list security controls applied

• To define financial expenses

• To create user authentication policies

• To manage employee records

Which document justifies the inclusion or exclusion of controls in an ISMS?

• Risk Assessment Report

• Statement of Applicability

• Business Continuity Plan

• Data Privacy Agreement

Who is responsible for approving the SOA?

• IT Administrator

• CEO

• ISMS Manager

• Compliance Officer

Which section of ISO 27001 provides the list of controls referenced in the SOA?

• Clause 4

• Clause 6

• Annex A

• Clause 10

What should be included in an SOA?

• List of applied controls

• Justification for control selection

• Implementation details

• All of the above