QUESTION $1$

An effective security policy is considered balanced when?

The policy is neither too complex and difficult to follow nor too open, leaving you vulnerable

Flexible and open to change so that it can be adapted over time to new threats