Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

GAQM ISO-IEC-LI Exam - Topic 7 Question 100 Discussion

Actual exam question for GAQM's ISO-IEC-LI exam

Question #: 100
Topic #: 7

[All ISO-IEC-LI Questions]

What does the Information Security Policy describe?

Ahow the InfoSec-objectives will be reached

Bwhich InfoSec-controls have been selected and taken

Cwhat the implementation-planning of the information security management system is

Dwhich Information Security-procedures are selected

Show Suggested Answer

Suggested Answer: A

by Louann at Jul 10, 2025, 06:17 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-LI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherly

7 months ago

I agree, the procedures are key in the policy.

upvoted 0 times

...

Fausto

7 months ago

Definitely covers the implementation planning too.

upvoted 0 times

...

Amber

7 months ago

I thought it was more about the selected controls.

upvoted 0 times

...

Alba

7 months ago

Wait, are we sure it doesn't cover all of these?

upvoted 0 times

...

Clarence

8 months ago

It's all about how the InfoSec objectives will be reached!

upvoted 0 times

...

Leonor

8 months ago

I’m a bit confused about the difference between procedures and controls. I guess option D could be right, but I need to review that section again.

upvoted 0 times

...

Lucina

8 months ago

I feel like the policy also covers implementation planning, which makes me think option C could be correct too.

upvoted 0 times

...

Ming

8 months ago

I remember a practice question that mentioned InfoSec controls, so I might lean towards option B, but I need to double-check.

upvoted 0 times

...

Louvenia

8 months ago

I think the Information Security Policy outlines how the InfoSec objectives will be reached, but I'm not entirely sure.

upvoted 0 times

...

Thurman

9 months ago

Oof, this is a tricky one. I know information security policies are important, but I'm not entirely sure which of these options is the best description. I'll have to make an educated guess on this one.

upvoted 0 times

...

Geraldo

9 months ago

Ah, I think I've got this one! An InfoSec policy is meant to outline the overall approach and objectives for information security, so I'm going to go with option A.

upvoted 0 times

...

Maurine

9 months ago

Hmm, I'm a bit unsure about this one. The options seem to cover different aspects of information security, but I'm not entirely sure which one specifically describes the purpose of an InfoSec policy. I'll have to think this through carefully.

upvoted 0 times

...

Charlette

9 months ago

This seems like a straightforward question about information security policies. I'll carefully read through the options and select the one that best describes what an InfoSec policy covers.

upvoted 0 times

...

Lettie

10 months ago

As an InfoSec expert, I can say with confidence that the correct answer is B. Anything else is just nonsense.

upvoted 0 times

...

Carman

10 months ago

Ah, a classic InfoSec question. I bet the answer is hidden somewhere in the policy itself. Or maybe it's just a trick question and they're all wrong!

upvoted 0 times

...

Cordie

10 months ago

Hmm, I'm torn between B and D. Both sound like they could be the right answer. Maybe I should just guess and hope for the best.

upvoted 0 times

Lavonne

9 months ago

D seems to focus on the procedures we follow.

upvoted 0 times

...

Artie

9 months ago

I think B is more about the controls in place.

upvoted 0 times

...

Lashanda

10 months ago

Can you really go wrong with either B or D?

upvoted 0 times

...

Ligia

10 months ago

Guessing isn't a bad idea, just pick one!

upvoted 0 times

...

...

Mindy

10 months ago

I think A is the best choice. The policy should outline how the InfoSec objectives will be achieved.

upvoted 0 times

Bong

10 months ago

I agree, A is the most logical choice.

upvoted 0 times

...

...

Dana

11 months ago

Option B is clearly the correct answer. It describes the InfoSec-controls that have been selected and implemented.

upvoted 0 times

Laurel

10 months ago

The Information Security Policy describes the controls that have been selected and implemented.

upvoted 0 times

...

Anastacia

10 months ago

I agree, option B is the correct answer.

upvoted 0 times

...

Tony

10 months ago

It's important to have clear InfoSec-controls in place to protect sensitive information.

upvoted 0 times

...

Alexis

10 months ago

The Information Security Policy describes the controls that have been selected and implemented.

upvoted 0 times

...

Dacia

11 months ago

I agree, option B is the correct answer.

upvoted 0 times

...

...

Geraldo

12 months ago

Yes, Jacqueline, having the right controls in place is crucial for security.

upvoted 0 times

...

Jacqueline

12 months ago

I believe the policy also includes which InfoSec-controls have been selected and taken.

upvoted 0 times

...

Fernanda

12 months ago

I agree with Clement, it's important to have clear objectives in place.

upvoted 0 times

...

Clement

12 months ago

I think the Information Security Policy describes how the InfoSec-objectives will be reached.

upvoted 0 times

...