Discuss PECB ISO-IEC-27001-Lead-Auditor Exam Topic 2 Question 23

How is the purpose of information security policy best described?

AAn information security policy documents the analysis of risks and the search for countermeasures.

BAn information security policy provides direction and support to the management regarding information security.

CAn information security policy makes the security plan concrete by providing it with the necessary details.

DAn information security policy provides insight into threats and the possible consequences.

Suggested Answer: B

Get Premium ISO-IEC-27001-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Art 11 months ago

Wait, I thought it was just about compliance, not all this detail!

Nickolas 11 months ago

D sounds good, but is it really the main focus?

Eliz 12 months ago

C really nails it; it gives the plan structure.

Catarina 12 months ago

A is more about risk analysis, not the overall purpose.

Tish 12 months ago

I think option B is spot on!

Kristofer 1 year ago

I recall that information security policies should also give insight into threats, so option D might be relevant too, but I'm not confident about that one.

India 1 year ago

I feel like I've seen a question similar to this before, and I think the focus was on making the security plan concrete, which would be option C.

Lorrie 1 year ago

I'm not entirely sure, but I remember something about how these policies also document risks and countermeasures, which sounds like option A.

Angella 1 year ago

I think the purpose of an information security policy is mainly to provide direction and support to management, so I might lean towards option B.

Laticia 1 year ago

Hmm, I'm not totally sure about this one. I know non-relational databases are different from SQL databases, but I can't quite remember the specific characteristics. I'll have to think this through carefully.

Paris 1 year ago

Transactions are a key part of JMS, so I should be able to handle this. I'll review the code and the options to determine the correct approach to transaction management.

Gilma 1 year ago

The GCP Console option seems the most user-friendly, but I wonder if it provides the same level of automation and scripting capabilities as the API and CLI. I'll need to weigh the tradeoffs.

Pearlie 1 year ago

Hmm, I'm not totally sure about this one. I'll have to think it through carefully before selecting an answer.

PECB ISO-IEC-27001-Lead-Auditor Exam - Topic 2 Question 23 Discussion