Free ISO-IEC-27001-Foundation Questions for APMG-International ISO/IEC 27001 (2022) Foundation ISO-IEC-27001-Foundation Exam as PDF & Practice Test Engine

Exam Code/Number: ISO-IEC-27001-Foundation
Exam Name/Title: ISO/IEC 27001 (2022) Foundation Exam
Certification Provider: APMG-International
Corresponding Certification: ISO/IEC 27001

Exam Questions: 72
Updated On: Jul 21, 2026

Question #1

Who is required to ensure that staff are supported so that they can contribute to the information security management system?

A. Management responsible for each area of operation

B. Top management of the organization

C. ISO/IEC 27001 practitioners within the organization

D. Auditors who audit each area of operation

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #2

Which statement describes a requirement of an internal audit programme?

A. The programme must use third party auditors to ensure impartiality

B. The programme must consider the importance of the target processes

C. All processes must be audited within a 3-year cycle

D. Previous audit results are disregarded to ensure objectivity

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #3

Which statement describes the Classification of information control in Annex A of ISO/IEC
27001?

A. Ensures that security perimeters are used to protect assets

B. Ensures that information is classified based on confidentiality, integrity and availability

C. Ensures that all information assets are labelled with their classification

D. Ensures the rules to control physical and logical access apply to assets

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #4

Which ISMS documentation is part of the minimum scope of documented information required to be managed and controlled?

A. A statement of correspondence between other ISO standards and the ISMS

B. The budget assigned to operate the ISMS and its related allocations

C. Third party information security awareness materials

D. Records of management decisions related to continual improvement

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #5

What is the name of the control clause used to control information security breaches within Annex A of ISO/IEC 27001?

A. Information security event reporting

B. Response to information security events

C. Information security event management

D. Reporting information security incidents

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #6

What is the purpose of risk assessment?

A. To eliminate all risks

B. To identify, analyze, and evaluate information security risks

C. To perform penetration testing

D. To install security software

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #7

Which document lists the security controls that are applicable to the organization?

A. Business Continuity Plan

B. Information Security Policy

C. Statement of Applicability (SoA)

D. Risk Register

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #8

What is the purpose of an internal audit?

A. To conduct employee training

B. To verify that the ISMS conforms to ISO/IEC 27001 and is effectively implemented

C. To perform vulnerability scanning

D. To certify the ISMS

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Free ISO-IEC-27001-Foundation Questions for APMG-International ISO/IEC 27001 (2022) Foundation ISO-IEC-27001-Foundation Exam as PDF & Practice Test Engine

Download Free APMG-International ISO-IEC-27001-Foundation Demo