Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

PECB ISO-IEC-27002-Foundation Exam - Topic 2 Question 2 Discussion

According to ISO/IEC 27002, which of the following statements is correct?
A) Equipment should be sited securely and protected to reduce the risks from environmental and physical threats
B) Equipment is NOT affected by power failures or other disruptions
C) Supporting utilities should be tested only at the beginning of the process

PECB ISO-IEC-27002-Foundation Exam - Topic 2 Question 2 Discussion

Actual exam question for PECB's ISO-IEC-27002-Foundation exam
Question #: 2
Topic #: 2
[All ISO-IEC-27002-Foundation Questions]

According to ISO/IEC 27002, which of the following statements is correct?

Show Suggested Answer Hide Answer
Suggested Answer: A

ISO/IEC 27002 requires equipment to be sited and protected in a way that reduces risks from physical and environmental threats. These threats include fire, flood, dust, vibration, electrical interference, unauthorized access, power instability, temperature extremes, and other environmental hazards. Option A is correct because secure siting and protection of equipment are essential to preserving confidentiality, integrity, and availability of information processing facilities. Option B is incorrect because equipment can absolutely be affected by power failures, utility disruptions, voltage fluctuations, overheating, and related events. Option C is incorrect because supporting utilities should be maintained, monitored, and tested as appropriate over time, not only at the beginning. ISO/IEC 27002 physical controls emphasize that technical systems depend on the physical environment. Servers, network devices, storage, and endpoint systems need appropriate location, power, cooling, cabling protection, and resilience measures. Equipment placement should also reduce unauthorized viewing, tampering, theft, and environmental exposure. The verified answer is option A because it reflects the physical protection objective in ISO/IEC 27002. Reference/Chapters: ISO/IEC 27002:2022, Control 7.8 Equipment siting and protection; Control 7.5 Protecting against physical and environmental threats; Control 7.11 Supporting utilities.


Contribute your Thoughts:

0/2000 characters
Lorita
7 hours ago
A) is definitely correct! Security is key.
upvoted 0 times
...
Nobuko
5 days ago
A sounds familiar, but I can't recall if we specifically covered that in relation to ISO/IEC 27002. I hope I remember it correctly!
upvoted 0 times
...
Delfina
11 days ago
I feel like we had a practice question that mentioned the need for ongoing testing of utilities, which makes C sound wrong to me.
upvoted 0 times
...
Erick
16 days ago
I'm not entirely sure, but I remember something about power failures being a significant risk, so B seems incorrect.
upvoted 0 times
...
Emmanuel
2 months ago
I think A is the right answer because we discussed the importance of securing equipment against environmental threats in our last study session.
upvoted 0 times
...

Save Cancel