PECB Exam ISO-IEC-20000-Foundation Topic 1 Question 11 Discussion

Actual exam question for PECB's ISO-IEC-20000-Foundation exam

Question #: 11
Topic #: 1

[All ISO-IEC-20000-Foundation Questions]

What is the purpose of information security controls?

ATo enforce the information security policy

BTo monitor information security incidents

CTo control access to the services

DTo address identified information security risks

Show Suggested Answer

Suggested Answer: A

by Karan at Feb 08, 2025, 07:25 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-20000-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Royce

1 months ago

I thought the purpose was to keep the IT guys employed and make the rest of us feel like we're constantly being watched. Option E, anyone?

upvoted 0 times

Sabrina

16 days ago

B) To monitor information security incidents

upvoted 0 times

...

Josefa

20 days ago

A) To enforce the information security policy

upvoted 0 times

...

Dianne

2 months ago

C is tempting, but let's be real, if that was the purpose, we'd all be locked out of everything. I'm sticking with D as the most comprehensive answer.

upvoted 0 times

Leonie

Definitely, D is the best choice for the purpose of information security controls.

upvoted 0 times

...

Shantell

1 days ago

I agree, D covers all aspects of information security controls.

upvoted 0 times

...

Sheridan

3 days ago

D is the most comprehensive answer.

upvoted 0 times

...

Haydee

4 days ago

D) To address identified information security risks

upvoted 0 times

...

Detra

6 days ago

C) To control access to the services

upvoted 0 times

...

Benton

13 days ago

B) To monitor information security incidents

upvoted 0 times

...

Michell

21 days ago

A) To enforce the information security policy

upvoted 0 times

...

Deonna

2 months ago

Hmm, I'm torn between B and D. Monitoring incidents is important, but ultimately, the controls are there to mitigate the risks, so I'll go with D.

upvoted 0 times

Malinda

5 days ago

User 4: I think ultimately the controls are there to address identified information security risks.

upvoted 0 times

...

Alysa

16 days ago

User 3: I'm torn between monitoring incidents and addressing risks.

upvoted 0 times

...

Danica

21 days ago

User 2: I agree, but I believe it's also to address identified information security risks.

upvoted 0 times

...

Kris

27 days ago

User 1: I think the purpose is to enforce the information security policy.

upvoted 0 times

...

Troy

2 months ago

I think option A is the best answer here. The controls are meant to enforce the information security policy, which is the foundation of any security program.

upvoted 0 times

...