MENU
What is the ISO / IEC 27002 standard?
Suggested Answer: A
Get Premium ISO-IEC-LI Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
JE
Jeff
6 months ago
B is the best choice for implementation guidance.
LI
Lizette
6 months ago
I feel A covers the basics well.
EM
Emilio
7 months ago
C seems too specific. I prefer A or B.
MI
Mitsue
7 months ago
A makes sense, but B is more focused.
LE
Levi
7 months ago
I lean towards B. ISMS design is crucial.
RA
Raina
7 months ago
I think it's A. Good practices are essential for info security.
VA
Valentin
7 months ago
Yeah, but it also covers control objectives, right?
GE
Gerry
8 months ago
I thought it was more about metrics and effectiveness.
GI
Gilbert
8 months ago
Wait, isn't it just a subset of ISO 27001?
EL
Eleonore
8 months ago
Haha, I bet the exam writers are trying to trip us up with this one. I'm sticking with option A, the classic ISO/IEC 27002 guide.
ME
Meghann
8 months ago
This is the easiest question I've seen all day. Option A is the obvious choice, no need to overthink it.
FR
Freeman
9 months ago
Wait, is this a trick question? I'm going to go with option A, but I'm keeping an eye out for any curveballs.
BR
Brock
9 months ago
Hmm, I'm leaning towards option C. Metrics and measurement are key for an effective ISMS.
MO
Moon
9 months ago
I’m a bit confused; I thought 27002 was more about metrics and effectiveness, but that might be option C instead.
CL
Clare
9 months ago
I feel like I saw a question similar to this in practice exams, and it was about the relationship between 27001 and 27002.
CO
Colton
9 months ago
I remember studying that it provides guidance on control objectives, which sounds like option A might be correct.
TA
Tammi
9 months ago
I think ISO/IEC 27002 is about good practices for information security controls, but I'm not entirely sure if it covers implementation specifics.
OL
Olive
10 months ago
Based on my understanding, option A seems to be the best description of the ISO/IEC 27002 standard. It provides guidance on information security controls and objectives.
SK
Skye
10 months ago
I'm a bit confused on the differences between the ISO/IEC 27002 and 27001 standards. I'll need to re-read the question carefully and think through the options.
DO
Dolores
10 months ago
It's all about good practices for info security!
AU
Augustine
10 months ago
Okay, I remember learning about this in class. I'm pretty sure option A is the correct answer - it's a guide for information security best practices.
DA
Daren
10 months ago
This question is a no-brainer! Option A is clearly the correct answer.
BA
Barrie
11 months ago
I'm pretty sure option B is the way to go here. It seems to be the most comprehensive guide.
MY
Myra
11 months ago
Totally agree, it's essential for ISMS design!
TI
Tijuana
11 months ago
Hmm, I think option A sounds right, but I'm not 100% confident. I'll need to review the details of the standard to be sure.
BR
Brett
11 months ago
I'm pretty sure the ISO/IEC 27002 standard is a guide for good information security practices, but I'm not sure about the specifics of the options.
AZ
Azalee
5 months ago
All options have merit, but A feels most relevant to me.
MI
Michell
6 months ago
I agree with Han. A solid guide on good practices is key.
NO
Norah
6 months ago
Option C sounds interesting too. Metrics are crucial for effectiveness.
PO
Pok
6 months ago
I lean towards option B. It’s about designing an ISMS effectively.
HA
Han
6 months ago
I think it's option A. Good practices are essential for info security.