GIAC Security Essentials Certification (GSEC) — Question 19

Which of the following statements about policy is FALSE?

Answer options

• A. A well-written policy contains definitions relating to "what" to do.
• B. A well-written policy states the specifics of "how" to do something.
• C. Security policy establishes what must be done to protect information stored on computers.
• D. Policy protects people who are trying to do the right thing.

Correct answer: D

Explanation

The correct answer is D because while policies aim to guide behavior, they do not inherently provide protection for individuals acting within their frameworks. Options A, B, and C correctly describe aspects of policies that focus on definitions, specifics of execution, and the importance of security policies, respectively.