Study baseline: the 2022 editions, excluding the 2024 amendments. ISO 27001 defines ISMS requirements; ISO 27002 provides control guidance. Not every control is mandatory: selection must be justified by risks and applicable requirements. This preview question bank is in Spanish. English, Portuguese and regional-language editions need editorial review before publication.
Turn a reference number into a defensible decision
Review material for students, security practitioners and people preparing to take part in audits. Practise connecting a situation to a requirement or control, choosing evidence and explaining why another option does not fit.
ISMS requirement topics
30
ISO 27002 controls
93
Question variants
492
492 variants across 123 topics: four ways to practise each topic, not 492 independent cases. The practice bank is in Spanish.
Planned individual access to this area's practice modes, mock exams, explanations and history. Other courses and certification are not included.
Charges are disabled. Independent editorial review and the subscription, renewal and cancellation workflow must be completed before sales open. Exploring this preview will not charge you.
Accessibility included at no extra cost: keyboard navigation, responsive text and Nexsora's reading preferences.
A short routine for thoughtful review
Recall before looking
Try to identify the reference or choose the action before reading the explanation. Start with a five-question session.
Check your reasoning
Read the correction and distractors. In auditor mode, compare your explanation with the rubric; it is not presented as automatic professional grading.
Return to your mistakes
Use the topic matrix and error review to choose the next session. Mock exams reveal corrections at the end and do not impose a mandatory countdown.
Two worked examples before you sign in
Simulated situations and data created for this review. These are public samples, not official certification questions or reproductions of the standards.
ISO 27001 · Assess risks using consistent criteria
A university assesses 12 systems. Two teams rate the same risk as high and low using different scales. Before approving treatment, what should the ISMS owner clarify?
Reasoned answer
Agree and apply risk assessment and acceptance criteria that allow consistent and comparable results, and identify risk owners. Ask for the documented method, scales and assessment record. Buying a tool or averaging both ratings does not fix the inconsistent method.
Review reference: ISO/IEC 27001:2022 · 6.1.2. Consult the requirement in your authorized copy.
ISO 27002 · Remove access that is no longer needed
In a simulated case, a business reviews 80 accounts and finds 14 still active after their holders have left. Which control guides reviewing and removing those access rights?
Reasoned answer
Control 5.18, access rights. Confirm the cases with personnel and system owners, remove unnecessary rights through the approved procedure and inspect evidence of provisioning, changes, removal and periodic reviews. The observed 17.5% (14/80) describes this sample, not a universal compliance threshold. Changing passwords without removing permissions does not solve the problem.
Review reference: ISO/IEC 27002:2022 · 5.18. Distinguish it from 6.5: responsibilities after termination or change of employment.
What is included, and what is not
Is this a course or an exam preparation area?
It is an independent review area. It covers 30 topics in ISO 27001 clauses 4–10 and all 93 ISO 27002 controls, with 492 variants, cases, learning blocks, error review and mock exams of 20, 40, 60 or 100 questions. It does not replace comprehensive training or studying the standards.
Will I receive official certification or the standards as PDFs?
No. Nexsora provides original practice material, not ISO certification or a guarantee of passing an external exam. The complete standards and supplied PDFs are not distributed. Official references are linked at the end of this page.
Which language and editions do the questions use?
The bank is in Spanish and based on the 2022 editions of ISO 27001 and 27002; it does not include the 2024 amendments. This public overview is also available in English. Other question-bank languages and independent editorial review are still pending.
What will it cost, and can I pay now?
The initial price is S/ 24.90 PEN per month for one person. Charges are currently disabled; sign in to try five questions for free. Final renewal and cancellation terms will be published before sales are enabled.
Published by Nexsora as platform-owned material. This preview awaits independent editorial review; it is not attributed to a personal profile or endorsed by ISO.