Discuss EC-Council 312-38 Exam Topic 7 Question 13

Daniel is giving training on designing and implementing a security policy in the organization. He is explaining the hierarchy of the security policy which demonstrates how policies are drafted, designed and implemented.

What is the correct hierarchy for a security policy implementation?

ALaws, Policies, Regulations, Procedures and Standards

BRegulations, Policies, Laws, Standards and Procedures

CLaws, Regulations, Policies, Standards and Procedures

DProcedures, Policies, Laws, Standards and Regulations

Suggested Answer: C

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Jettie 12 months ago

Not convinced, I feel like procedures should be at the top.

Raylene 12 months ago

C is definitely right, I've seen it in multiple sources.

Anastacia 12 months ago

Wait, are we sure about that? I thought regulations were higher up.

Avery 1 year ago

Totally agree with C, makes the most sense.

Ming 1 year ago

I think it's C, laws come first!

Mica 1 year ago

I feel like I might be mixing up the order of policies and standards. I thought it was regulations first, but now I'm second-guessing myself.

Louis 1 year ago

I remember practicing a question like this, and I think it was laws, regulations, then policies. So maybe option C?

Ilona 1 year ago

I think the hierarchy starts with laws, but I'm not sure if regulations come right after that or if policies are next.

Keneth 1 year ago

I definitely remember that procedures come last, but I can't recall if it's policies or standards that come before them. This is tricky!

Caren 1 year ago

Okay, let's see here. The question is asking what the entry of the customer details represents. I'm leaning towards "Step in a task" since it's part of the overall ordering process, but I could see an argument for "Process" as well. Tricky one!

Micheal 1 year ago

I'm a bit confused on this one. There are a lot of options and I'm not totally sure which three are considered the main container registries. I'll have to make an educated guess and hope for the best.

Tiara 1 year ago

I've got this! The answer is D, GlideSystem and current. That's the combination of objects you can use in a Scheduled Script Execution script.

Antonio 1 year ago

I think ensuring data confidentiality, integrity, and availability is really tied to conducting a data protection impact assessment, right? But I'm not entirely sure if that's the exact answer.

EC-Council 312-38 Exam - Topic 7 Question 13 Discussion