ISO 27001 Session

1. An employee accidentally overwrites part of a client AI dataset, causing the stored information to become inaccurate. Which element of the CIA Triad has primarily been affected?

Availability Confidentiality Integrity Authenticity

2. A Labeler needs access to an additional Microsoft 365 resource for a new project. According to Omniera's access-control approach, what is the most appropriate action?

Use a colleague's account temporarily Ask colleague to share their PIN Request role-based access through IT Administrator Create a Microsoft personal account

3. An employee leaves their workstation unattended. Which control is most directly applicable?

A7.7 Clear Desk and Clear Screen A7.12 Cabling Security A5.9 Inventory of Assets A7.4 Physical Security Monitoring

4. Which of the following would violate Omniera's Acceptable Use rules?

Using Microsoft Teams professionally for work Storing authorized company data in OneDrive Using a private VPN to access a blocked website Locking the workstation before leaving the desk

5. Which ISO 27001 clause focuses on monitoring, measurement, internal audits, and review of the ISMS?

Clause 6 — Planning Clause 7 — Support Clause 9 — Performance Evaluation Clause 10 — Improvement

6. An employee receives a suspicious email containing an unfamiliar link. What is the most appropriate response?

Open the link in a private browser Ignore the email without informing anyone Do not open the link and report the suspicious event Forward the link to colleagues for their opinion

7. Which of the following best describes Omniera's physical entry-control requirements?

All employees may enter restricted rooms if necessary Restricted rooms such as inventory, electrical, and CEO rooms are limited to authorized personnel Restricted rooms are open during normal working hours Employees may borrow another employee's access card

8. Why should information security incidents be reported immediately?

So employees can avoid using the affected system permanently So damage can be detected and contained before it becomes more serious So the employee can personally investigate the incident So the incident does not need to be documented later

9. Why is Multi-Factor Authentication (MFA) important?

It allows employees to share passwords safely It verifies user identity and reduces unauthorized account access It removes the need for passwords It gives all employees the same access rights

10. What is the preferred primary communication channel for official work-related communication at Omniera?

Personal WhatsApp accounts Personal email accounts Microsoft Teams linked to office accounts Social media messaging

11. At Omniera, which system is used to link employees with asset serial numbers and seating information?

Teams Odoo OneDrive Fleet

12. Which statement best describes the relationship between ISO 9001 and ISO 27001 at Omniera?

ISO 9001 focuses on information security while ISO 27001 focuses on quality ISO 9001 focuses on consistent quality while ISO 27001 focuses on protecting information Both standards have exactly the same purpose ISO 27001 eliminates the need for ISO 9001

13. An employee discusses confidential client project details with a friend outside the company. Which control is most directly violated?

A6.6 Confidentiality or Non-Disclosure Agreements A5.9 Asset Inventory A8.23 Web Filtering A7.4 Physical Security Monitoring

14. An employee notices unusual activity on their account but decides to wait until the next day before reporting it. Why is this inappropriate?

Security events should be reported promptly so potential damage can be contained Employees are required to reset every account themselves Security events should only be reported once a month Only external clients can report security incidents

15. What should an employee do before leaving their workstation unattended even for a short amount of time?

Turn off the monitor only Ask a colleague to watch the computer Lock the screen using Win + L Leave the screen open if they will return shortly

ISO/IEC 27001 Information Security Awareness Training

Completed

ISO 27001 Session