Question 1

What is ISO127001 all about?

Accepted Answer

Establishing an information security management system

Answer

Requirements and setup of security software (Firewall, Anti-Virus, etc.)

Answer

Set of rules that must be implemented within the company

Answer

Handling of physical documents

Question 2

How to achieve Information Security?

Accepted Answer

Implement and constantly practice the process of protecting information

Answer

Acquire a security software package and install it within the organization

Answer

Hire a data protection company that will monitor and prevent intrusions and attacks

Question 3

Which types of information are protected by the ISO127001

Accepted Answer

All of the information mentioned in every other answer

Answer

Employees private data (bank accounts, salary statements, home addresses)

Answer

Starred company data (clients and suppliers, stakeholders, investor data, etc.)

Answer

Client (contracts, employees emails, etc.) and Respondent data (emails, IP addresses, answers, etc.)

Question 4

What will this mean for our current and future clients?

Accepted Answer

Better protection of client information and higher chances of acquiring new clients

Answer

All clients will be required to conform with the policies and procedures, established by the ISO127001

Answer

ISO127001 has no effect on our current and future clients

Answer

Starred will be required to submit a quarterly ISO127001 report to every client

Question 5

Where should the MFA (2FA) be used?

Accepted Answer

Every service (website) that supports it

Answer

Services (websites) listed in the ISO127001 policy

Answer

Using MFA (2FA) is considered a bad practice

Answer

Finance-related products only

Question 6

What data should be stored (kept) on work notebook

Accepted Answer

Only the data that is currently required in relation to tasks at hand

Answer

ISO127001 doesn't restrict types of information stored on my notebook

Answer

All company data I have access to according to the security policies

Answer

Both company data and my private information

Question 7

Should the access to data (information) be separated

Accepted Answer

Yes, based on CIA classification

Answer

No, ISO127001 policies do not require data access separation

Answer

No, separating access to data (information) compromises information security

Answer

Yes, based on employees personal decision

Question 8

When is it appropriate to log in from client's (or public) device

Accepted Answer

Never. Login and (any private information) may be used only on company laptop

Answer

During mission critical meetings and sales

Answer

After making sure the client's (or public) device has appropriate anti-virus software installed

Answer

Only if the owner of the device is trustworthy

Question 9

How is "clear screen and clear desk" policy applicable?

Accepted Answer

Every employee must lock their notebooks if going away and lock documents in a lockable drawer

Answer

This policy is a recommendation and is not enforced by ISO127001

Answer

Notebook must be locked only if leaving it for more than 10 minutes. Documents should be turned face down to prevent others from seeing the contents.

Answer

Only management must make sure to  lock their notebooks if going away and lock documents in a lockable drawer

Question 10

What is a strong password?

Accepted Answer

Both requirement must be met - more than 8 characters and at least 1 special character

Answer

Something personal to me like a pet name or mother's maiden name or my favorite football team

Answer

As long as one requirement is met - either more than 8 characters or at least 1 special character

Answer

Password must be picked from the list, provided by the ISO127001 policy

Question 11

What network type should be preferred?

Accepted Answer

4G is preferred. Wifi may be used but only in combination with a VPN.

Answer

4G and a password-protected WiFi are both good

Answer

Wifi is preferred.  4G may be used but only in combination with a VPN

Answer

Any network because modern systems enforce encryption

Question 12

Who is responsible for protecting information

Accepted Answer

Every employee including myself

Answer

ISO127001 auditor, after granting the certification to Starred

Answer

Information protection is automated and requires no effort from employees

Answer

Security department and management

Question 13

To whom should the security policies be applied?

Accepted Answer

All employees, freelancers and suppliers

Answer

All employees

Answer

Top management

Answer

Security department

Question 14

What restriction apply on transport of the data?

Accepted Answer

Minimize the transport and use only secure, encrypted network

Answer

Data transfer is not restricted as long as reliable network is used

Answer

Data transport is prohibited at all times

Answer

No restrictions because modern communication technologies and services provide reliable protection

Question 15

When should information security policies be applied?

Accepted Answer

Always apply both at work and at home

Answer

Only when visiting clients or working in public spaces

Answer

When deemed necessary at my own discretion

Answer

Anywhere outside the office

Question 16

How suspicious activities and situations should be handled?

Accepted Answer

All suspicious activities and situations should be reported to the security officer

Answer

None, all suspicious activities and situations are monitored and reported automatically

Answer

Only high level threats should be reported to the security officer

Answer

Only those activities and situations that employee can't handle personally

Related quizzes

Related quizzes