What is the overarching purpose of Annex F in DSAC practice exams?

• A. To test knowledge of information security governance, risk management, and controls as applied to DSAC contexts.
• B. To provide a compact overview of DSAC procedural guidelines.
• C. To teach programming for secure DSAC systems.
• D. To summarize regulatory requirements for DSAC operations.

Answer: (A)

The main concept being tested is applying information security governance, risk management, and controls within DSAC contexts. Annex F is aiming to assess how well you can take security principles and translate them into DSAC-specific decisions—establishing governance structures and policies, conducting risk assessments, selecting and implementing appropriate controls, and evaluating their ongoing effectiveness. This focus distinguishes it from content about procedural guidelines, programming for secure systems, or simply summarizing regulatory requirements. The best answer captures the idea of applying governance, risk management, and controls directly to DSAC contexts.