ISO/IEC 27001 Foundation practice examsIn development
PECB ISO/IEC 27001 Foundation
The PECB ISO/IEC 27001 Foundation certification validates your understanding of the fundamental concepts and principles of an Information Security Management System (ISMS) based on ISO/IEC 27001:2022. It demonstrates that you can understand the key elements used to implement and manage an ISMS, including policies, procedures, risk assessment, and Annex A controls. This entry-level certification is ideal for anyone involved in information security, IT governance, risk management, or compliance.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Information Security Fundamentals | 25% |
| The ISO/IEC 27001 Clauses | 25% |
| Annex A Controls | 25% |
| Implementation and Certification | 25% |
Two sample questions
1. Which clause specifically addresses the need for continual improvement of the ISMS?
- Clause 4 - Context
- Clause 7 - Support
- Clause 10 - Improvement
- Clause 8 - Operation
Why: Clause 10 (Improvement) specifically addresses nonconformity and corrective action (10.2) and continual improvement (10.1) of the ISMS suitability, adequacy, and effectiveness.
2. A.8.28 (Secure coding) is significant because it represents which type of addition in ISO 27001:2022?
- A control that existed in ISO 27001:2013 but was renamed and relocated to a different theme
- A completely new control added in the 2022 revision to address software development security
- A control that was removed from Annex A and moved into the mandatory clauses section
- A control that only applies to organizations that develop software commercially for external clients
Why: A.8.28 (Secure coding) is one of 11 new controls introduced in ISO 27001:2022, requiring that secure coding principles be established and applied to all software development.
The real ISO/IEC 27001 Foundation exam
| Length | 60 minutes |
|---|---|
| Questions | 75 multiple-choice |
| Pass mark | 65% |
| Price | $350 USD |
| Recommended before you sit it | No prior experience required |
| Valid for | Lifetime (no renewal required for Foundation) |
Exam facts as published by PECB; always check the vendor’s page before you book.
Study ISO/IEC 27001 Foundation with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.