GAQM ISO-IEC-LI Exam - Topic 5 Question 103 Discussion

Actual exam question for GAQM's ISO-IEC-LI exam

Question #: 103
Topic #: 5

What is the ISO / IEC 27002 standard?

AIt is a guide of good practices that describes the control objectives and recommended controls regarding information security.

BIt is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001

CIt is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

Show Suggested Answer

Suggested Answer: A

by Holley at Nov 22, 2025, 06:06 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-LI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gerry

12 hours ago

I thought it was more about metrics and effectiveness.

upvoted 0 times

...

Gilbert

6 days ago

Wait, isn't it just a subset of ISO 27001?

upvoted 0 times

...

Eleonore

11 days ago

Haha, I bet the exam writers are trying to trip us up with this one. I'm sticking with option A, the classic ISO/IEC 27002 guide.

upvoted 0 times

...

Meghann

16 days ago

This is the easiest question I've seen all day. Option A is the obvious choice, no need to overthink it.

upvoted 0 times

...

Freeman

21 days ago

Wait, is this a trick question? I'm going to go with option A, but I'm keeping an eye out for any curveballs.

upvoted 0 times

...

Brock

26 days ago

Hmm, I'm leaning towards option C. Metrics and measurement are key for an effective ISMS.

upvoted 0 times

...

Moon

1 month ago

I’m a bit confused; I thought 27002 was more about metrics and effectiveness, but that might be option C instead.

upvoted 0 times

...

Clare

1 month ago

I feel like I saw a question similar to this in practice exams, and it was about the relationship between 27001 and 27002.

upvoted 0 times

...

Colton

1 month ago

I remember studying that it provides guidance on control objectives, which sounds like option A might be correct.

upvoted 0 times

...

Tammi

2 months ago

I think ISO/IEC 27002 is about good practices for information security controls, but I'm not entirely sure if it covers implementation specifics.

upvoted 0 times

...

Olive

2 months ago

Based on my understanding, option A seems to be the best description of the ISO/IEC 27002 standard. It provides guidance on information security controls and objectives.

upvoted 0 times

...

Skye

2 months ago

I'm a bit confused on the differences between the ISO/IEC 27002 and 27001 standards. I'll need to re-read the question carefully and think through the options.

upvoted 0 times

...