OpenExamsFREE PRACTICE — ANY EXAM

PECB ISO/IEC 27001 Foundation — Information & Free Practice

150 free questions · Answer explanations · No signup required

Start free practice →

Exam Review

About PECB ISO/IEC 27001 Foundation

PECB ISO/IEC 27001 Foundation · US

Key exam facts

Provider
PECB (legal entity PECB Group Pte. Ltd.), responsible body for the Foundation program and its summative assessment; online delivery and remote invigilation use the PECB Exams application.
Format
English online remotely invigilated, multiple-choice and closed-book. Each official question has three options with one correct answer; paper delivery is another mode of the same assessment.
Exam questions
Total questions: 40.
Time limit
1 hour of examination time in the English catalogue. The handbook allows 10 additional minutes on request for candidates testing in a non-native language. Candidates must be present 30 minutes before the start; that is arrival time, not added answer time.
Passing score
70% passing score (percentage scale).
Exam fee
The official handbook lists Foundation Exam: $500, separately from Foundation Certificate: $200; it does not identify the dollar currency with an ISO code in that fee table. For partner training, the course price includes the first exam attempt, first retake and certificate application; complete the cycle within 12 months of instructor-led course completion or self-study/eLearning purchase. No universal partner training price is stated on the official program page.

Topics covered

  • Fundamental principles and concepts of an information security management system (ISMS) (50%)

    • Main standards of the ISO/IEC 27000 family
    • Other information security regulations, industry standards, and best practices
    • Advantages of implementing an ISMS based on ISO/IEC 27001:2022
    • Definition of management system and management system standards
    • Structure of ISO/IEC 27001:2022
    • Main requirements of ISO/IEC 27001:2022, clauses 4 to 10
    • Plan-Do-Check-Act (PDCA) cycle
    • Main concepts of information security related to ISO/IEC 27001:2022
    • Relationship between information security elements
    • Information confidentiality, integrity, and availability
    • Information security vulnerabilities, threats, and risks
    • Main characteristics of artificial intelligence and cloud computing

  • Information security management system (ISMS) (50%)

    • Typical ISMS objectives
    • Organization's internal and external context
    • Roles and responsibilities of interested parties relevant to ISMS
    • Role of top management in ISMS implementation
    • Types of information security policies
    • Information security policy and its development life cycle
    • Processes required to manage information security risks
    • Selection of the risk assessment methodology
    • Risk identification, analysis, and evaluation
    • Risk treatment options
    • Competence and awareness activities
    • Resource management during ISMS implementation
    • Training, awareness, and communication principles
    • Documented information relevant to the ISMS
    • ISO/IEC 27001:2022 operational planning requirements
    • Monitoring, measurement, analysis, and performance evaluation
    • Internal and external audits
    • Nonconformities, action plans, and corrective actions
    • Management review activities
    • Definition and benefits of continual improvement
    • Type and function of security controls
    • ISO/IEC 27001:2022 Annex A controls

How to prepare

Work through the topics, read the explanation after each answer, and revisit the areas where you miss questions. Use the official outline and reference materials below to guide your study.

These independent practice questions are not actual exam items and do not guarantee a passing result.

Frequently asked questions

What is the exam format?

English online remotely invigilated, multiple-choice and closed-book. Each official question has three options with one correct answer; paper delivery is another mode of the same assessment.

How many questions are on the exam?

Total questions: 40.

How long is the exam?

1 hour of examination time in the English catalogue. The handbook allows 10 additional minutes on request for candidates testing in a non-native language. Candidates must be present 30 minutes before the start; that is arrival time, not added answer time.

What is the passing score?

70% passing score (percentage scale).

How much does the exam cost?

The official handbook lists Foundation Exam: $500, separately from Foundation Certificate: $200; it does not identify the dollar currency with an ISO code in that fee table. For partner training, the course price includes the first exam attempt, first retake and certificate application; complete the cycle within 12 months of instructor-led course completion or self-study/eLearning purchase. No universal partner training price is stated on the official program page.

Official sources and references

Confirm current exam arrangements with the exam provider.