GAQM ISO27-13-001 Exam - Topic 6 Question 21 Discussion

Actual exam question for GAQM's ISO27-13-001 exam

Question #: 21
Topic #: 6

[All ISO27-13-001 Questions]

How is the purpose of information security policy best described?

AAn information security policy documents the analysis of risks and the search for countermeasures.

BAn information security policy provides direction and support to the management regarding information security.

CAn information security policy makes the security plan concrete by providing it with the necessary details.

DAn information security policy provides insight into threats and the possible consequences.

Show Suggested Answer

Suggested Answer: B

by Lorrine at May 04, 2022, 02:26 AM

Limited Time Offer

25%

Off

Get Premium ISO27-13-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Quiana

4 months ago

Wait, I thought info security policies were just about compliance?

upvoted 0 times

...

Erick

4 months ago

D seems too vague to me, not sure it covers everything.

upvoted 0 times

...

Janae

4 months ago

C makes a lot of sense, it’s all about the details!

upvoted 0 times

...

Georgeanna

4 months ago

A is definitely part of it, but not the whole picture.

upvoted 0 times

...

Marvel

5 months ago

I think option B is spot on!

upvoted 0 times

...

Slyvia

5 months ago

I feel like option C could be right too, since policies do need to make plans concrete, but I’m not confident.

upvoted 0 times

...

Vallie

5 months ago

I'm not entirely sure, but I remember discussing how policies also detail risks and countermeasures, which makes option A seem relevant.

upvoted 0 times

...

Danica

5 months ago

I think the purpose of an information security policy is mainly to provide direction, so I might lean towards option B.

upvoted 0 times

...

Rhea

5 months ago

I recall a practice question that emphasized understanding threats, which makes me think option D might also be a good choice.

upvoted 0 times

...

Lavera

5 months ago

This seems like a tricky question. I'll need to think carefully about the benefits of exploratory testing for the Bonus Program.

upvoted 0 times

...

Laquanda

5 months ago

This question seems to be testing our understanding of contract law principles. I'll need to carefully consider the key elements of a valid contract to determine the correct answer.

upvoted 0 times

...

Lorean

5 months ago

Hmm, I'm a bit confused by the "guaranteed-once FIFO" part. I'll need to review my notes on message delivery guarantees to make sure I understand that properly.

upvoted 0 times

...

Lashawn

5 months ago

Hmm, I'm a bit unsure about the difference between the two statements. I'll need to think through the specific responsibilities of IT Financial Management to determine which one or both are accurate.

upvoted 0 times

...