CompTIA Security Exam Practice Questions Sample SY0 501 Q504

A procedure differs from a policy in that it:

A. is a high-level statement regarding the company’s position on a topic.
B. sets a minimum expected baseline of behavior.
C. provides step-by-step instructions for performing a task.
D. describes adverse actions when violations occur.

Correct Answer: C