C838 ISO/NIST standards Exam with
Correct Answers
ISO/IEC 27037:2012 - Answer-Guide for collecting, identifying, and preserving
electronic evidence.
ISO/IEC 27041:2015 - Answer-Guide for incident investigations
ISO/IEC 27042:2015 - Answer-Guide for digital evidence analysis
ISO/IEC 27043:2015 - Answer-Incident investigation principles and processes
ISO/IEC 27050-1:2016 - Answer-Overview and principles for eDiscovery
NIST SP 800-37 - Answer-Guide for implementing the Risk Management Framework
ENISA - Answer-Identifies 35 types of risks for cloud computing
ISO/IEC 15408-1:2009 - Answer-Common Criteria Assurance Framework on ensuring
security products have been thoroughly tested.
CSA Star - Answer-Consists of the Cloud Controls Matrix and Consensus Assessments
Initiative Questionnaire
ISO/IEC 27034-1 - Answer-Secure Application Development
ISO/IEC 27017:2015 - Answer-Guidelines for Infosec controls for provision and use of
cloud services and cloud service customers.
ISO/IEC 27018:2015 - Answer-Privacy aspects of Cloud Computing for Customers
NIST SP 800-145 - Answer-Pertains to defining cloud concepts and definitions for the
various core components of cloud computing
NIST 500-292 - Answer-Cloud Computing Security Reference Architecture
NIST 500-299 - Answer-Security Reference Architecture
NIST 800-037 - Answer-Risk Management Frameworks
NIST 800-053 - Answer-Privacy Control
NIST 800-057 - Answer-Encryption
NIST 800-061 - Answer-Incident Handling Guide
Correct Answers
ISO/IEC 27037:2012 - Answer-Guide for collecting, identifying, and preserving
electronic evidence.
ISO/IEC 27041:2015 - Answer-Guide for incident investigations
ISO/IEC 27042:2015 - Answer-Guide for digital evidence analysis
ISO/IEC 27043:2015 - Answer-Incident investigation principles and processes
ISO/IEC 27050-1:2016 - Answer-Overview and principles for eDiscovery
NIST SP 800-37 - Answer-Guide for implementing the Risk Management Framework
ENISA - Answer-Identifies 35 types of risks for cloud computing
ISO/IEC 15408-1:2009 - Answer-Common Criteria Assurance Framework on ensuring
security products have been thoroughly tested.
CSA Star - Answer-Consists of the Cloud Controls Matrix and Consensus Assessments
Initiative Questionnaire
ISO/IEC 27034-1 - Answer-Secure Application Development
ISO/IEC 27017:2015 - Answer-Guidelines for Infosec controls for provision and use of
cloud services and cloud service customers.
ISO/IEC 27018:2015 - Answer-Privacy aspects of Cloud Computing for Customers
NIST SP 800-145 - Answer-Pertains to defining cloud concepts and definitions for the
various core components of cloud computing
NIST 500-292 - Answer-Cloud Computing Security Reference Architecture
NIST 500-299 - Answer-Security Reference Architecture
NIST 800-037 - Answer-Risk Management Frameworks
NIST 800-053 - Answer-Privacy Control
NIST 800-057 - Answer-Encryption
NIST 800-061 - Answer-Incident Handling Guide
