Question 1

What is a PII controller?

Options :

A : A natural person to whom the PII relates

B : A privacy stakeholder that determines the purpose and means for processing PII besides individuals who use data for personal purposes

C : A privacy stakeholder that handles PII on behalf of and in accordance with the instructions of a PII controller

Answer: B

Question 2

Which control should an organization implement to ensure that the software is written securely and the number of potential vulnerabilities in the software is reduced?

Options :

A : Control 8.29 Security testing in development and acceptance

B : Control 8.26 Application security requirements

C : Control 8.28 Secure coding

Answer: C

Question 3

Which of the following is an example of an organizational asset in cyberspace?

Options :

A : Medical data

B : Digital customer identity

C : Intellectual property

Answer: B

Question 4

According to ISO/IEC 27002, which of the following statements is correct?

Options :

A : Equipment should be sited securely and protected to reduce the risks from environmental and physical threats

B : Equipment is NOT affected by power failures or other disruptions

C : Supporting utilities should be tested only at the beginning of the process

Answer: A