Which of the following best describes the structure of ISO 27001?

It consists of a set of requirements for establishing an ISMS, with Annex A providing a catalog of control objectives and controls

It is a set of mandatory technical controls that must be implemented exactly as specified

It is a step-by-step guide for deploying specific security software

It is a list of legal requirements for data protection in the European Union

Which ISO 27001 Annex A control is most directly relevant to network security?

A.9.2.1 User registration and de-registration

A.18.1.1 Identification of applicable legislation

A.12.6.1 Management of technical vulnerabilities

Which of the following is a key requirement of ISO 27001 Annex A controls?

All controls must be implemented regardless of risk assessment

Controls must be selected based on a risk assessment and risk treatment plan

Controls are optional and can be ignored if they are difficult to implement

Controls are only applicable to large enterprises

What is the first step in aligning security infrastructure features with ISO 27001 requirements?

Wait for an external audit before making any changes

Disable all security features to avoid conflicts

Conduct a gap analysis between current security controls and ISO 27001 requirements

Purchase the most expensive security products

Which of the following is an example of aligning security infrastructure features with ISO 27001?

Disabling logging to save storage space

Implementing network segmentation based on risk assessment results

Configuring firewalls to allow all traffic for ease of use

Using default passwords on network devices

CCIE Security

Domain 3Objective 7

3.7 Security Features to Comply with Organizational Security Policies, Procedures, and Standards BCP 38 CCIE-SECURITY Practice Questions (Page 3)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

15%of the exam

Questions 11–15

11foundation · easy
Which of the following best describes the structure of ISO 27001?
Select an answer first
12foundation · easy
Which ISO 27001 Annex A control is most directly relevant to network security?
Select an answer first
13foundation · easy
Which of the following is a key requirement of ISO 27001 Annex A controls?
Select an answer first
14foundation · easy
What is the first step in aligning security infrastructure features with ISO 27001 requirements?
Select an answer first
15foundation · easy
Which of the following is an example of aligning security infrastructure features with ISO 27001?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.