CompTIA Security+ (SY0-501) — Question 612

A procedure differs from a policy in that it:

Answer options

• A. is a high-level statement regarding the company's position on a topic.
• B. sets a minimum expected baseline of behavior.
• C. provides step-by-step instructions for performing a task.
• D. describes adverse actions when violations occur.

Correct answer: C

Explanation

The correct answer is C because a procedure offers specific, detailed instructions for completing a task, whereas a policy is more general and outlines the organization's overall stance. Options A and B describe characteristics of policies, while option D refers to the consequences of policy violations, which does not pertain to the definition of a procedure.