As a security practitioner, you should understand security industry best practices. For which reason are these practices NOT useful?

A. Best practices allow a security practitioner to see what others do in similar situations.
B. Security practitioners need to know what to do first to yield the largest payback within a particular timeframe.
C. Following best practices will ensure your enterprise is free from security issues.
D. Best practices allow an organization to show they used due diligence if a breach occurs.

C

Explanation: Following best practices will NOT ensure your enterprise is free from security issues. There are no guarantees against security issues as they are constantly being discovered by attackers.

All of the other statements are true regarding best practices.