PECB Exam ISO-IEC-20000-Foundation Topic 1 Question 11 Discussion

Actual exam question for PECB's ISO-IEC-20000-Foundation exam

Question #: 11
Topic #: 1

[All ISO-IEC-20000-Foundation Questions]

What is the purpose of information security controls?

ATo enforce the information security policy

BTo monitor information security incidents

CTo control access to the services

DTo address identified information security risks

Show Suggested Answer

Suggested Answer: A

by Karan at Feb 08, 2025, 07:25 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-20000-Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Deonna

2 days ago

Hmm, I'm torn between B and D. Monitoring incidents is important, but ultimately, the controls are there to mitigate the risks, so I'll go with D.

upvoted 0 times

...

Troy

6 days ago

I think option A is the best answer here. The controls are meant to enforce the information security policy, which is the foundation of any security program.

upvoted 0 times

...

Selma

14 days ago

I agree, it's important to address identified information security risks as well.

upvoted 0 times

...

Isabelle

14 days ago

The purpose of information security controls is to address identified information security risks, so I'll go with option D.

upvoted 0 times

...

Gene

16 days ago

I think it's also to control access to the services.

upvoted 0 times

...

Ronna

25 days ago

The purpose is to enforce the information security policy.

upvoted 0 times

...