MENU
What is the greatest risk for an organization if no information security policy has been defined?
Suggested Answer: D
Get Premium ISO-IEC-LI Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
PE
Peggie
12 months ago
I disagree, A is not the main issue, it's all about D for me.
JA
Javier
12 months ago
Surprised that people think C is a risk, too many measures can be a good thing!
FR
Francesco
12 months ago
B sounds right, security can't just be a few people's job.
VE
Veda
1 year ago
I think D is the biggest risk, consistency is key!
TI
Tiara
1 year ago
Definitely A, no accountability means chaos.
JE
Jesus
1 year ago
I think the answer might be that it leads to chaos in security implementation, but I could be mixing it up with another topic we covered.
DO
Dominque
1 year ago
I feel like this question is similar to one we practiced about accountability in security. If there's no policy, tracking actions becomes a nightmare.
GR
Graham
1 year ago
I’m not entirely sure, but I think the biggest risk is that without a policy, security measures might not be applied uniformly.
LA
Lashandra
1 year ago
I remember discussing how a lack of a security policy can lead to inconsistent practices across the organization.
XU
Xuan
1 year ago
Customer Group seems like the best answer, but I'm a bit unsure since the other option mentions "Dynamic Block Type" which also sounds relevant.
KA
Kaitlyn
1 year ago
Hmm, I'm not sure about the "remove the option to display alias" one. That seems like it might impact the functionality of the form rather than just performance.
MY
Myra
1 year ago
Hmm, I'm a bit confused by the different options here. I'm not sure I fully understand how some of these techniques work to disguise a buffer overflow attack. I'll need to review my notes on network security before attempting this.