Q: 3
Which two of the following statements are true?
Options
Discussion
I don't think it's C. Auditors just review the organization's processes, not the actual compliance status, so A and B fit best. C is a bit of a trap since auditors aren't certifying legal compliance directly, pretty sure about that.
I think AB, since C is a trap. Auditors check the process, not directly certify compliance status. Someone double-check me if I'm off.
AB tbh, C's a trap since auditors don't actually certify legal compliance in ISO 27001 context.
Hmm, I'm kinda torn between AB and C here. Process review is definitely in the auditor's wheelhouse, but sometimes the wording makes C seem right too. So maybe AB, but not 100% sure.
Probably AB here. Auditors check processes and how orgs stay updated with legal changes, but they don't directly verify full legal compliance status themselves. C isn't right for certification audits in ISO 27001 if I'm remembering the PECB Lead Auditor materials correctly. If anyone has a different source, let me know!
Option AB, saw similar in official practice. Auditors focus on processes and awareness, not the actual compliance verdict.
Option AB. Checking processes and how orgs stay aware of law changes, not certifying compliance status.
Makes sense to pick AB here. Auditors look at how the org manages legal requirements and keeps up with changes (A, B), but they're not confirming compliance status directly like in C. Seen similar wording in training materials. If others see it differently, let me know.
C/AB? Still not totally sure. Auditors for ISO 27001 mainly check if there's a process in place for legal requirements and awareness (A and B), but they don't directly verify compliance status (that's usually on the org, not the auditor). I think AB is safer here, but that C wording always throws me off.
Yeah, it's AB for me. Auditors check processes and awareness, not actual legal compliance status like in C.
Be respectful. No spam.