PECB ISO/IEC 27002 Foundation - ISO-IEC-27002-Foundation Exam Questions [2026]

QUESTION NO: 1
What is risk assessment?

A. The overall process of risk identification, risk analysis, and risk evaluation B. The process to comprehend the nature of risk arid to determine the level of risk C. The process of finding, recognizing, and describing risks

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Which control addresses the need to define and allocate information security responsibilities?

A. 5.4 Management responsibilities B. 5.3 Segregation of duties C. 5.2 Information security roles and responsibilities

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
What is the purpose of control 5.9 Inventory of information and other associated assets?

A. To identify organizational assets and define appropriate protection responsibilities B. To ensure encryption of all stored data C. To define supplier security requirements

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which control should an organization implement to ensure that the software is written securely and the number of potential of vulnerabilities in the software is reduced?

A. Control 8.28 Secure coding B. Control 8.26 Application security requirements C. Control 8.29 Security testing in development and acceptance

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Which of the following is an example of an organizational asset in cyberspace?

A. Intellectual property B. Medical data C. Digital customer identity

Correct Answer: A

QUESTION NO: 6
What is the main purpose of control 5.12 Classification of information of ISO/IEC 27002?

A. To facilitate the communication of classification of information and support automation of information processing and management B. To ensure identification and understanding of protection needs of information based on its importance C. To ensure authorized access and prevent unauthorized access to information

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Which control of ISO/IEC 27002 helps organizations ensure that employees and contractors are suitable for their roles?

A. Control 6.7 Remote working B. Control 6.1 Screening C. Control 6.4 Disciplinary process

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Why should an organization integrate information security into project management?

A. To ensure information security audits on the project and deliverables are regularly conducted B. To ensure the effective application of ISO/IEC 27001 principles related to projects and deliverables C. To ensure information security risks related to projects and deliverables are effectively addressed

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).