Which of the following does a security policy do?

The correct answer is B. Identifies and clarifies security goals and objectives. A security policy provides the high-level direction from leadership by defining the organization’s security goals and objectives. It does not dive into cost models, specific access controls, or recovery procedures - that detail is reserved for standards, guidelines, and…

Submitted by dimitri_ru· Mar 6, 2026Security Operations

Question

Options

AEstablishes a cost model for security activity
BIdentifies and clarifies security goals and objectives
CEnables management to define system access rules
DAllows management to define system recovery requirements

How the community answered

(36 responses)

A
6% (2)
B
89% (32)
C
3% (1)
D
3% (1)

Explanation

A security policy provides the high-level direction from leadership by defining the organization’s security goals and objectives. It does not dive into cost models, specific access controls, or recovery procedures - that detail is reserved for standards, guidelines, and procedures.

Topics

#security policy#governance#security objectives

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice