MENU
What is the purpose of information security controls?
Suggested Answer: A
Get Premium ISO-IEC-20000-Foundation Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
JU
Judy
10 months ago
Monitoring incidents is a big part too, right?
JE
Jeannetta
11 months ago
Wait, are they really that effective?
OD
Odette
11 months ago
Totally agree, they also address security risks!
RO
Roosevelt
11 months ago
I think they mainly focus on controlling access.
DO
Doyle
11 months ago
They help enforce the security policy for sure.
WI
Willow
12 months ago
I believe controlling access to services is definitely a part of it, but I think the broader goal is about managing risks.
JO
Josephine
12 months ago
I'm a bit confused about this one. I feel like monitoring incidents is important too, but it might not be the primary purpose.
GL
Glendora
12 months ago
I remember practicing a question similar to this, and I think enforcing the information security policy was a big part of it.
VA
Valentin
1 year ago
I think the main purpose of information security controls is to address identified information security risks, but I'm not entirely sure.
TE
Tesha
1 year ago
I'm a little confused by the wording of this question. Is it asking about the overall purpose of information security controls, or just one specific purpose? I'll need to re-read the question and options to make sure I understand it fully.
VA
Val
1 year ago
Okay, I've got this. The purpose of information security controls is to address identified risks and enforce the security policy. I'm pretty confident that option D is the correct answer here.
ET
Ethan
1 year ago
Hmm, I'm a bit unsure about this one. I know information security controls are important, but I'm not totally clear on the specific purpose. I'll need to think through each answer option carefully.
MA
Mattie
1 year ago
This seems like a straightforward question about the purpose of information security controls. I'll focus on understanding the key concepts and how they relate to the answer choices.
RO
Royce
1 year ago
I thought the purpose was to keep the IT guys employed and make the rest of us feel like we're constantly being watched. Option E, anyone?
BE
Beth
1 year ago
C) To control access to the services
SA
Sabrina
1 year ago
B) To monitor information security incidents
JO
Josefa
1 year ago
A) To enforce the information security policy
DI
Dianne
1 year ago
C is tempting, but let's be real, if that was the purpose, we'd all be locked out of everything. I'm sticking with D as the most comprehensive answer.
LE
Leonie
1 year ago
Definitely, D is the best choice for the purpose of information security controls.
SH
Shantell
1 year ago
I agree, D covers all aspects of information security controls.
SH
Sheridan
1 year ago
D is the most comprehensive answer.
HA
Haydee
1 year ago
D) To address identified information security risks
DE
Detra
1 year ago
C) To control access to the services
BE
Benton
1 year ago
B) To monitor information security incidents
MI
Michell
1 year ago
A) To enforce the information security policy
DE
Deonna
1 year ago
Hmm, I'm torn between B and D. Monitoring incidents is important, but ultimately, the controls are there to mitigate the risks, so I'll go with D.
MA
Malinda
1 year ago
User 4: I think ultimately the controls are there to address identified information security risks.
AL
Alysa
1 year ago
User 3: I'm torn between monitoring incidents and addressing risks.
DA
Danica
1 year ago
User 2: I agree, but I believe it's also to address identified information security risks.
KR
Kris
1 year ago
User 1: I think the purpose is to enforce the information security policy.
TR
Troy
1 year ago
I think option A is the best answer here. The controls are meant to enforce the information security policy, which is the foundation of any security program.
SE
Selma
2 years ago
I agree, it's important to address identified information security risks as well.
IS
Isabelle
2 years ago
The purpose of information security controls is to address identified information security risks, so I'll go with option D.
JE
Jeannetta
1 year ago
Information security controls are essential to address risks, so option D makes sense.
ZI
Zita
1 year ago
I agree, option D is the correct choice.
GE
Gene
2 years ago
I think it's also to control access to the services.
RO
Ronna
2 years ago
The purpose is to enforce the information security policy.