Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

PECB ISO-IEC-20000-Foundation Exam - Topic 1 Question 11 Discussion

Actual exam question for PECB's ISO-IEC-20000-Foundation exam

Question #: 11
Topic #: 1

[All ISO-IEC-20000-Foundation Questions]

What is the purpose of information security controls?

ATo enforce the information security policy

BTo monitor information security incidents

CTo control access to the services

DTo address identified information security risks

Show Suggested Answer

Suggested Answer: A

by Karan at Feb 08, 2025, 07:25 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-20000-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Judy

7 months ago

Monitoring incidents is a big part too, right?

upvoted 0 times

...

Jeannetta

8 months ago

Wait, are they really that effective?

upvoted 0 times

...

Odette

8 months ago

Totally agree, they also address security risks!

upvoted 0 times

...

Roosevelt

8 months ago

I think they mainly focus on controlling access.

upvoted 0 times

...

Doyle

8 months ago

They help enforce the security policy for sure.

upvoted 0 times

...

Willow

9 months ago

I believe controlling access to services is definitely a part of it, but I think the broader goal is about managing risks.

upvoted 0 times

...

Josephine

9 months ago

I'm a bit confused about this one. I feel like monitoring incidents is important too, but it might not be the primary purpose.

upvoted 0 times

...

Glendora

9 months ago

I remember practicing a question similar to this, and I think enforcing the information security policy was a big part of it.

upvoted 0 times

...

Valentin

9 months ago

I think the main purpose of information security controls is to address identified information security risks, but I'm not entirely sure.

upvoted 0 times

...

Tesha

9 months ago

I'm a little confused by the wording of this question. Is it asking about the overall purpose of information security controls, or just one specific purpose? I'll need to re-read the question and options to make sure I understand it fully.

upvoted 0 times

...

Val

9 months ago

Okay, I've got this. The purpose of information security controls is to address identified risks and enforce the security policy. I'm pretty confident that option D is the correct answer here.

upvoted 0 times

...

Ethan

9 months ago

Hmm, I'm a bit unsure about this one. I know information security controls are important, but I'm not totally clear on the specific purpose. I'll need to think through each answer option carefully.

upvoted 0 times

...

Mattie

9 months ago

This seems like a straightforward question about the purpose of information security controls. I'll focus on understanding the key concepts and how they relate to the answer choices.

upvoted 0 times

...

Royce

1 year ago

I thought the purpose was to keep the IT guys employed and make the rest of us feel like we're constantly being watched. Option E, anyone?

upvoted 0 times

Beth

1 year ago

C) To control access to the services

upvoted 0 times

...

Sabrina

1 year ago

B) To monitor information security incidents

upvoted 0 times

...

Josefa

1 year ago

A) To enforce the information security policy

upvoted 0 times

...

...

Dianne

1 year ago

C is tempting, but let's be real, if that was the purpose, we'd all be locked out of everything. I'm sticking with D as the most comprehensive answer.

upvoted 0 times

Leonie

1 year ago

Definitely, D is the best choice for the purpose of information security controls.

upvoted 0 times

...

Shantell

1 year ago

I agree, D covers all aspects of information security controls.

upvoted 0 times

...

Sheridan

1 year ago

D is the most comprehensive answer.

upvoted 0 times

...

Haydee

1 year ago

D) To address identified information security risks

upvoted 0 times

...

Detra

1 year ago

C) To control access to the services

upvoted 0 times

...

Benton

1 year ago

B) To monitor information security incidents

upvoted 0 times

...

Michell

1 year ago

A) To enforce the information security policy

upvoted 0 times

...

...

Deonna

1 year ago

Hmm, I'm torn between B and D. Monitoring incidents is important, but ultimately, the controls are there to mitigate the risks, so I'll go with D.

upvoted 0 times

Malinda

1 year ago

User 4: I think ultimately the controls are there to address identified information security risks.

upvoted 0 times

...

Alysa

1 year ago

User 3: I'm torn between monitoring incidents and addressing risks.

upvoted 0 times

...

Danica

1 year ago

User 2: I agree, but I believe it's also to address identified information security risks.

upvoted 0 times

...

Kris

1 year ago

User 1: I think the purpose is to enforce the information security policy.

upvoted 0 times

...

...

Troy

1 year ago

I think option A is the best answer here. The controls are meant to enforce the information security policy, which is the foundation of any security program.

upvoted 0 times

...

Selma

1 year ago

I agree, it's important to address identified information security risks as well.

upvoted 0 times

...

Isabelle

1 year ago

The purpose of information security controls is to address identified information security risks, so I'll go with option D.

upvoted 0 times

Jeannetta

1 year ago

Information security controls are essential to address risks, so option D makes sense.

upvoted 0 times

...

Zita

1 year ago

I agree, option D is the correct choice.

upvoted 0 times

...

...

Gene

1 year ago

I think it's also to control access to the services.

upvoted 0 times

...

Ronna

1 year ago

The purpose is to enforce the information security policy.

upvoted 0 times

...