ISO/IEC 27001:2022 - Information Security Management Systems Foundation Quiz 10 24Mar25 - Practice Quiz

Study path

The free lane is only the front row

Keep the free practice test in view while the left rail shows everything else waiting behind it.

Free practice for ISO/IEC 27001:2022 - Information Security Management Systems Foundation

Answered

Wrong

Progress

Accuracy

Preview progress0/30

Ready score12%

This free quiz stays in the main area. The rail on the left shows the bigger study system waiting behind premium access.

Unlocked now

Free practice test

Unlocked

Start answering and the free lane begins filling up immediately

Instant explanations

Unlocked

Every answered free question now shows the explanation directly after you check it

Progress snapshot

Unlocked

Questions answered, wrong-answer rate, and readiness update live while you practice

Waiting to unlock

Detailed dashboard

Locked

Readiness trend, progress bars, wrong-answer review, and weak-domain coverage

Wrong-answer recovery

Locked

Auto-queue every miss for targeted recovery instead of losing it after one attempt

Flashcards

Locked

Quick recall decks for facts, terms, formulas, and repeated weak spots

Mind maps

Locked

Visual topic maps so harder objectives stop feeling scattered

Video courses

Locked

Guided topic walkthroughs for sections that still feel slow or confusing

4,300+ premium practice tests

Locked

The rest of the Certbie catalog stays visibly locked beside the free lane

13,900+ quiz sets

Locked

More depth across major vendors and long-tail niche certification tracks

Exam simulations

Locked

Longer timed practice sessions designed to feel much closer to the paid prep flow

Open Dashboard & Progress See Everything in Premium

Question 1 of 30

\"Maple Leaf Financial,\" a Canadian wealth management firm, is undergoing its initial ISO/IEC 27001:2022 certification audit. During the audit, the lead auditor discovers that while the firm has a comprehensive Information Security Management System (ISMS) in place, there is no formal data classification policy. Client data, including financial statements, investment portfolios, and personal identification information, is stored on a shared network drive with only basic access controls. The auditor notes that a recent internal risk assessment identified client data as a critical asset but did not specify any specific security controls beyond standard password protection. Furthermore, the firm has not fully addressed compliance requirements under Canadian privacy laws concerning the protection of personal financial information. Given this scenario and the requirements of ISO/IEC 27001:2022, what is the MOST appropriate immediate action that Maple Leaf Financial should take to address this gap in their ISMS and ensure the confidentiality, integrity, and availability of client data?

Develop and implement a data classification policy to determine appropriate security controls based on the sensitivity of the client data.

Immediately encrypt all data on the shared network drive and implement multi-factor authentication for all users.

Conduct a penetration test to identify vulnerabilities in the network infrastructure and address any identified weaknesses.

Purchase cyber insurance to mitigate the financial impact of potential data breaches involving client information.

Preparing for ISO/IEC 27001:2022 - Information Security Management Systems Foundation? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free