The correct answer is The code applies to every professional working in information security.

That statement is not accurate because a certification board typically governs the conduct of its own certificants and of members who agree to the code rather than every person employed in the information security field. The Global Security Certification Board would apply its code to those who hold or seek its credentials and to people who fall under its jurisdiction and enforcement procedures.

Compliance with the code is required to keep certification is not the correct choice because many certification bodies do require certificants to follow the code as a condition of maintaining their credential. That means compliance is commonly required and so the statement is accurate.

Members who detect a possible breach are obligated to report the issue is not the correct choice because codes of ethics often include duties to report known or suspected violations so the board can investigate and protect the integrity of its certifications. Reporting obligations are therefore commonly part of ethical rules.

Failure to follow the code can result in revocation of the credential is not the correct choice because disciplinary measures for serious or repeated violations frequently include suspension or revocation of certification. That makes this statement an accurate description of typical enforcement outcomes.

Full AWS Practitioner Certification Question