CONFIDENTIAL
Exemplar Examination Paper 1
Information Security Management Systems
Auditor Training Courses
(PR320 & PR341 ISO 27001)
This examination is closed book.
- A clean copy of ISO 27001 and a bilingual dictionary are the only items permitted for reference.
- Electronic devices, including laptops and mobile phones, are not permitted into the examination room. Exceptions may be granted to delegates with special needs. Any such arrangement must be with the prior written agreement of the Approved Training Partner and shall include a record of appropriate precautions that will be taken to ensure the fairness and security of the examination process and examination questions.
Information for delegates
The examination paper is in four sections. Attempt all sections and all questions.
The time allowed is two hours. There is no additional time allowed for reading the examination paper.
90 marks are available. To pass you must achieve at least 63 marks (70%), and you must achieve at least 50% in each of the four sections. The maximum marks for each question, or part of a question, are shown in brackets.
Your answers must be written on the sheets supplied. Please avoid writing in the margins; these are for the markers. Write on the reverse side of a page if necessary. Additional loose sheets will not be accepted.
All references to ISO 27001 refer to the latest issue.
Examination technique
Time management is very important in the examination. For guidance, the average
Time guidance for exam success:
- Reading the examination instructions – five minutes
- Section one – fifteen minutes
- Section two – twenty minutes
- Section three – forty minutes
- Section four – forty minutes
Total time available – two hours (120 minutes)
Allow enough time to read each question properly. Make sure you understand what is being asked for before starting to write your answer.
Where appropriate, the action verb that indicates the depth of answer required by the question – explain, list, describe – is printed in bold. You should ensure you understand the meaning of these terms (see below). Full marks will not be awarded for a list if an explanation is required. Conversely, it is a waste of time to provide a detailed explanation if the question asks for a list.
Action verb Meaning
describe depict in words
explain give a clear account of
outline give the most important features of (less depth than explain or describe)
briefly using few words or without giving a lot of details
give provide without explanation (used normally with the instruction to ‘give an example (or examples) of ….’)
list provide a list without explanation (bullet points)
identify select and name
define provide a generally recognised or accepted definition
state a less demanding form of ‘define’ or where there is no generally recognised definition
prepare make (something) ready for use or consideration
support strengthen, substantiate, back up, give weight to
