GAQM ISO-IEC-LI Exam - Topic 5 Question 103 Discussion

Actual exam question for GAQM's ISO-IEC-LI exam

Question #: 103
Topic #: 5

What is the ISO / IEC 27002 standard?

AIt is a guide of good practices that describes the control objectives and recommended controls regarding information security.

BIt is a guide that focuses on the critical aspects necessary for the successful design and implementation of an ISMS in accordance with ISO / IEC 27001

CIt is a guide for the development and use of applicable metrics and measurement techniques to determine the effectiveness of an ISMS and the controls or groups of controls implemented according to ISO / IEC 27001.

Show Suggested Answer

Suggested Answer: A

by Holley at Nov 22, 2025, 06:06 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-LI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jeff

1 month ago

B is the best choice for implementation guidance.

upvoted 0 times

...

Lizette

2 months ago

I feel A covers the basics well.

upvoted 0 times

...

Emilio

2 months ago

C seems too specific. I prefer A or B.

upvoted 0 times

...

Mitsue

2 months ago

A makes sense, but B is more focused.

upvoted 0 times

...

Levi

2 months ago

I lean towards B. ISMS design is crucial.

upvoted 0 times

...

Raina

2 months ago

I think it's A. Good practices are essential for info security.

upvoted 0 times

...

Valentin

2 months ago

Yeah, but it also covers control objectives, right?

upvoted 0 times

...

Gerry

3 months ago

I thought it was more about metrics and effectiveness.

upvoted 0 times

...

Gilbert

3 months ago

Wait, isn't it just a subset of ISO 27001?

upvoted 0 times

...

Eleonore

3 months ago

Haha, I bet the exam writers are trying to trip us up with this one. I'm sticking with option A, the classic ISO/IEC 27002 guide.

upvoted 0 times

...

Meghann

4 months ago

This is the easiest question I've seen all day. Option A is the obvious choice, no need to overthink it.

upvoted 0 times

...

Freeman

4 months ago

Wait, is this a trick question? I'm going to go with option A, but I'm keeping an eye out for any curveballs.

upvoted 0 times

...

Brock

4 months ago

Hmm, I'm leaning towards option C. Metrics and measurement are key for an effective ISMS.

upvoted 0 times

...

Moon

4 months ago

I’m a bit confused; I thought 27002 was more about metrics and effectiveness, but that might be option C instead.

upvoted 0 times

...

Clare

4 months ago

I feel like I saw a question similar to this in practice exams, and it was about the relationship between 27001 and 27002.

upvoted 0 times

...

Colton

4 months ago

I remember studying that it provides guidance on control objectives, which sounds like option A might be correct.

upvoted 0 times

...

Tammi

5 months ago

I think ISO/IEC 27002 is about good practices for information security controls, but I'm not entirely sure if it covers implementation specifics.

upvoted 0 times

...

Olive

5 months ago

Based on my understanding, option A seems to be the best description of the ISO/IEC 27002 standard. It provides guidance on information security controls and objectives.

upvoted 0 times

...

Skye

5 months ago

I'm a bit confused on the differences between the ISO/IEC 27002 and 27001 standards. I'll need to re-read the question carefully and think through the options.

upvoted 0 times

...