GAQM ISO27-13-001 Exam - Topic 8 Question 42 Discussion

Actual exam question for GAQM's ISO27-13-001 exam

Question #: 42
Topic #: 8

[All ISO27-13-001 Questions]

What is the purpose of an Information Security policy?

AAn information security policy makes the security plan concrete by providing the necessary details

BAn information security policy provides insight into threats and the possible consequences

CAn information security policy provides direction and support to the management regarding information security

DAn information security policy documents the analysis of risks and the search for countermeasures

Show Suggested Answer

Suggested Answer: C

by Cecily at Aug 18, 2022, 09:05 PM

Limited Time Offer

25%

Off

Get Premium ISO27-13-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Samira

4 months ago

Really? I’m surprised it covers so much ground!

upvoted 0 times

...

Keneth

4 months ago

It also helps in understanding potential threats, right?

upvoted 0 times

...

Justine

4 months ago

I thought it was just about documenting risks, but it does more?

upvoted 0 times

...

Elke

4 months ago

Totally agree, it’s essential for guiding management!

upvoted 0 times

...

Alida

4 months ago

An info security policy outlines the rules for protecting data.

upvoted 0 times

...

Emerson

5 months ago

I thought the main goal was to make the security plan concrete, which sounds like option A, but I could be mixing it up with another topic.

upvoted 0 times

...

Kanisha

5 months ago

I feel like the policy should outline threats and consequences, but I can't recall if that's the primary focus.

upvoted 0 times

...

Bronwyn

5 months ago

I remember a practice question that mentioned how policies help in risk analysis, so maybe option D is also relevant?

upvoted 0 times

...

Marylou

5 months ago

I think the policy is mainly about providing direction and support to management, but I'm not entirely sure if that's the main purpose.

upvoted 0 times

...

Dorian

5 months ago

Based on my understanding, the inspection plan for each equipment item is the primary output we're looking for. The RBI process is all about developing a targeted inspection strategy.

upvoted 0 times

...

Gertude

5 months ago

This seems straightforward enough. I'll just need to match up the VMs to the workspaces and then select the appropriate answer choice.

upvoted 0 times

...

Remona

5 months ago

Okay, let's see. We have 5 brokers, 10 partitions, and a replication factor of 3. The quota is 1 MB/sec. I think I can work this out.

upvoted 0 times

...

Felix

5 months ago

Hmm, this question seems a bit tricky. I'll need to carefully read through the details and think about how to apply the responsible AI principle of inclusiveness.

upvoted 0 times

...