Updated Oct 12, 2026 ISO-IEC-27002-Foundation Exam Dumps – PDF Questions and Testing Engine [Q39-Q57]

Updated Oct 12, 2026 ISO-IEC-27002-Foundation Exam Dumps – PDF Questions and Testing Engine [Q39-Q57]

Rate this post

Updated Oct 12, 2026 ISO-IEC-27002-Foundation Exam Dumps – PDF Questions and Testing Engine

New (2026) PECB ISO-IEC-27002-Foundation Exam Dumps

PECB ISO-IEC-27002-Foundation Exam Overview:

Certification Vendor:	PECB
Exam Name:	ISO/IEC 27002 Foundation
Exam Number:	ISO-IEC-27002-Foundation
Certificate Validity Period:	Permanent
Available Languages:	French, English, Spanish
Real Exam Qty:	40
Related Certifications:	ISO/IEC 27001 Foundation ISO/IEC 27002 Lead Manager PECB Certificate Holder in ISO/IEC 27002 Foundation
Exam Duration:	60 minutes
Exam Price:	$275 USD
Exam Format:	Closed Book, Multiple Choice
Sample Questions:	PECB ISO-IEC-27002-Foundation Sample Questions
Exam Way:	Online Proctored Exam through PECB Exams platform
Pre Condition:	No prerequisites required
Official Syllabus URL:	https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27002/iso-iec-27002-foundation

QUESTION 39
An organization does NOT authenticate the identity of persons that enter the server room, so unauthorized persons can easily gain access to the server. Which control of ISO/IEC 27002 should the organization implement to solve this problem?

Control 8.6 Capacity management

Control 7.2 Physical entry

Control 8.4 Access to source code

QUESTION 40
What is a PII controller?

A natural person to whom the PII relates

A privacy stakeholder that determines the purpose and means for processing PII besides individuals who use data for personal purposes

A privacy stakeholder that handles PII on behalf of and in accordance with the instructions of a PII controller

QUESTION 41
What is the purpose of control 7.7 Clear desk and clear screen?

To reduce the risk of unauthorized access, loss of, and damage to information during and outside normal working hours

To ensure all desks are made of secure materials

To manage employee termination procedures

QUESTION 42
Which control addresses the need to establish and apply a process for managing technical vulnerabilities?

8.8 Management of technical vulnerabilities

8.9 Configuration management

8.16 Monitoring activities

QUESTION 43
What does ISO/IEC 27002 recommend regarding audit testing?

Audit tests should be planned and agreed upon between the tester and the appropriate management

Audit tests and other assurance activities should be conducted ad hoc to determine the effectiveness of operational systems and business processes

The organization should temporarily stop its operational systems and business processes during audits and other assurance activities

QUESTION 44
Which control should an organization implement to ensure that the software is written securely and the number of potential vulnerabilities in the software is reduced?

Control 8.29 Security testing in development and acceptance

Control 8.26 Application security requirements

Control 8.28 Secure coding

QUESTION 45
How can organizations manage the security of large networks?

By dividing networks into separate network domains and separating them from the public network

By dividing networks into separate network domains and including them into the public network

By avoiding the integration of information services, users, and information systems into large networks

QUESTION 46
Which control specifically requires organizations to maintain contact with relevant authorities such as law enforcement or regulators?

5.5 Contact with authorities

5.6 Contact with special interest groups

5.7 Threat intelligence

QUESTION 47
An organization does NOT authenticate the identity of persons that enter the server room, so unauthorized persons can easily gain access to the server. Which control of ISO/IEC 27002 should the organization implement to solve this problem?

Control 8.6 Capacity management

Control 7.2 Physical entry

Control 8.4 Access source code

QUESTION 48
Which control should an organization implement to ensure that the software is written securely and the number of potential of vulnerabilities in the software is reduced?

Control 8.29 Security testing in development and acceptance

Control 8.26 Application security requirements

Control 8.28 Secure coding

QUESTION 49
An organization has set up a fire alarm. What type of control is this?

Corrective and managerial

Detective and technical

Preventive and legal

QUESTION 50
Company A has configured its employees’ browsers to block the IP address of malicious websites. Which information security control has been implemented by Company A?

Control 8.11 Data masking

Control 8.23 Web filtering

Control 5.18 Access rights

QUESTION 51
Why should an organization integrate information security into project management?

To ensure the effective application of ISO/IEC 27001 principles related to projects and deliverables

To ensure information security audits on the project and deliverables are regularly conducted

To ensure information security risks related to projects and deliverables are effectively addressed

QUESTION 52
Which statement below describes the principle of confidentiality?

Property that information is not made available or disclosed to unauthorized individuals, entities, or processes

Property of accuracy and completeness

Property of being accessible and usable upon demand by an authorized entity

QUESTION 53
How many control categories (themes) does the 2022 version of ISO/IEC 27002 organize its controls into?

QUESTION 54
What is the definition of “information security” according to ISO/IEC 27002?

Preservation of confidentiality, integrity and availability of information

Protection of information systems from cyberattacks only

Prevention of unauthorized physical access to premises

QUESTION 55
When can clock synchronization be difficult?

When using only on-premises services

When using multiple cloud services

Both A and B

QUESTION 56
Which information security principle is compromised by accidental changes in information?

Availability

Integrity

Confidentiality

QUESTION 57
Which of the following controls aims to protect the production environment and data?

Control 5.13 Labelling of information

Control 8.31 Separation of development, testing and operational environments

Control 6.6 Confidentiality or non-disclosure agreements

PECB ISO-IEC-27002-Foundation Exam Syllabus Topics:

Topic	Details
Topic 1	Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO IEC 27002: This domain covers the core principles and definitions that underpin information security, including the concepts of confidentiality, integrity, and availability. It focuses on how ISO IEC 27002 frames cybersecurity and privacy as foundational elements of an organization’s overall security posture.
Topic 2	Interpret the ISO IEC 27002 organizational, people, physical, and technological controls in the specific context of an organization: This domain covers the four control categories defined in ISO IEC 27002 organizational, people, physical, and technological and how each applies to real-world organizational environments. It requires understanding how to read, interpret, and contextualize these controls based on an organization’s specific needs, risks, and operating conditions.
Topic 3	Discuss the relationship between ISO IEC 27001, ISO IEC 27002, and other standards and regulatory frameworks: This domain examines how ISO IEC 27002 functions as a code of practice that supports the requirements set out in ISO IEC 27001, and how both standards interact with other relevant frameworks. It also addresses how organizations align these standards with applicable laws, regulations, and industry-specific requirements.