Prepare for the ISO/IEC 27001 Information Security Management (ISO 27001) certification by ISO with free exam-style practice questions on CyberCertPrep. The ISO 27001 exam has 80 questions, a time limit of ISO 27001 hours, and a passing score of 70%.
Choose from Practice mode, Exam Simulation, Weak Areas review, and Daily Challenge. Track your progress with detailed analytics and study with flashcards.
ISO/IEC 27001 Information Security Management (ISO 27001) Exam Domain
Focus your study on this domain with targeted practice questions. This domain accounts for 25% of your ISO 27001 exam score.
The Annex A Controls domain is one of 5 exam domains on the ISO/IEC 27001 Information Security Management (ISO 27001) certification exam by ISO. At 25% of the total exam, this is one of the most heavily weighted domains — mastering it is critical for passing.
The ISO 27001 exam consists of 80 questions with a time limit of 2 hours and a passing score of 70%. That means approximately 20 questions on your exam will come from the Annex A Controls domain.
Least Privilege
The principle of giving users, processes, and systems only the minimum levels of access needed to perform their job func...
Firewall
A network security system that monitors and controls incoming and outgoing network traffic based on predetermined securi...
Compliance
The act of conforming to established guidelines, specifications, regulations, or legislation related to information secu...
NIST Framework
A set of guidelines and best practices published by the National Institute of Standards and Technology to manage cyberse...
ISO 27001
An international standard for information security management systems (ISMS) that specifies requirements for establishin...
Cloud Security
The set of policies, technologies, controls, and services deployed to protect data, applications, and infrastructure in ...
CIA Triad
The three core principles of information security: Confidentiality (ensuring data is accessible only to authorized parti...
Defense in Depth
A layered security strategy that uses multiple independent security controls at different levels to protect information ...
These certifications also cover topics related to Annex A Controls: