Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Network Basics and Security

Which of the following best describes the primary purpose of the ISO/IEC 27001 standard in an organisation's network security programme?

ISO/IEC 27001 specifies requirements for establishing, implementing, maintaining and continually improving an information security management system. It is a risk-based, technology-neutral management standard, so it does not prescribe specific products such as firewalls, cabling speeds or software licensing terms.

  1. ATo specify requirements for establishing, implementing, maintaining and continually improving an information security management systemCorrect
  2. BTo prescribe the exact brand of firewall every organisation must install
  3. CTo define the licensing terms for open-source network software
  4. DTo set the speed and cabling specifications for Ethernet networks

Explanation

ISO/IEC 27001 is a management system standard for information security (ISMS). It is risk-based and does not mandate particular products. The firewall option is wrong because the standard is technology-neutral.

Did you get it right without looking?

One question tells you little. A timed set on Network Basics and Security shows your real accuracy, how long you take and where you lose marks.

Practise Network Basics and SecurityFree diagnostic mock

More Network Basics and Security questions