Final check — ISO/IEC 27001 Lead Implementer

Answer the 10 questions. You need 80% or more to pass. You can retry as many times as you like.

Question 1Which document is the only certifiable standard in the ISO/IEC 27000 family for an ISMS?ISO/IEC 27001ISO/IEC 27002ISO/IEC 27005ISO 19011

Question 2Which clauses of ISO/IEC 27001:2022 contain the mandatory, auditable requirements?Clauses 1 to 3Clauses 4 to 10Only Annex AClauses 5 to 8 only

Question 3How many controls and themes does Annex A of ISO/IEC 27001:2022 contain?114 controls in 14 domains93 controls in 4 themes75 controls in 5 themes100 controls in 10 domains

Question 4What is the purpose of the Statement of Applicability (SoA)?To record, for each Annex A control, applicability, justification and statusTo list staff training records onlyTo replace the risk assessmentTo define the company's marketing strategy

Question 5Under Clause 6, who must formally accept a residual risk?The external auditorThe IT help deskThe risk ownerAny employee

Question 6Which of these is one of the four risk treatment options in ISO/IEC 27001?Ignore the risk indefinitelyDelete the asset registerHide the risk from managementModify (apply controls)

Question 7What term does ISO/IEC 27001:2022 use for documents and records combined?PaperworkKnowledge baseDocumented informationConfiguration items

Question 8At the certification audit, what is the typical consequence of a major nonconformity?It is ignoredCertification is blocked until it is resolvedThe certificate is issued for ten yearsThe auditor fixes it for you

Question 9How long is an ISO/IEC 27001 certificate normally valid before recertification?One yearTwo yearsThree years, with annual surveillance auditsFive years, with no checks

Question 10Which principle must be respected when conducting internal audits under Clause 9.2?Auditors should audit their own work for speedAudits must be objective and impartial — no auditing your own workOnly external auditors may perform internal auditsInternal audits are optional

Final check — ISO/IEC 27001 Lead Implementer

Already paid?