CompTIA CS0-003 Exam - Topic 1 Question 21 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 21
Topic #: 1

The Chief Information Security Officer (CISO) of a large management firm has selected a cybersecurity framework that will help the organization demonstrate its investment in tools and systems to protect its dat

a. Which of the following did the CISO most likely select?

APCI DSS

BCOBIT

CISO 27001

DITIL

Show Suggested Answer

Suggested Answer: C

ISO 27001 is an international standard that establishes a framework for implementing, maintaining, and improving an information security management system (ISMS). It helps organizations demonstrate their commitment to protecting their data and complying with various regulations and best practices. The other options are not relevant for this purpose: PCI DSS is a standard that focuses on protecting payment card data; COBIT is a framework that provides guidance on governance and management of enterprise IT; ITIL is a framework that provides guidance on service management and delivery.

According to the CompTIA CySA+ Study Guide: Exam CS0-003, 3rd Edition1, one of the objectives for the exam is to ''use appropriate tools and methods to manage, prioritize and respond to attacks and vulnerabilities''. The book also covers the usage and syntax of various cybersecurity frameworks and standards, such as ISO 27001, PCI DSS, COBIT, and ITIL, in chapter 1. Specifically, it explains the meaning and function of each framework and standard, such as ISO 27001, which provides a comprehensive approach to information security management1, page 29. Therefore, this is a reliable source to verify the answer to the question.

by Dierdre at May 30, 2024, 08:53 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brice

3 months ago

Wait, I didn't know ISO 27001 was that widely accepted!

upvoted 0 times

...

Minna

3 months ago

I disagree, COBIT has its merits too, especially for governance.

upvoted 0 times

...

Micaela

3 months ago

Definitely ISO 27001, it's all about security management!

upvoted 0 times

...

Erinn

4 months ago

Really? I thought PCI DSS was more relevant for that.

upvoted 0 times

...

Letha

4 months ago

I'm pretty sure ISO 27001 is the go-to for data protection.

upvoted 0 times

...

Paris

4 months ago

I practiced a question about ITIL, but that was more about IT service management. I doubt it’s the right answer here.

upvoted 0 times

...

Bev

4 months ago

COBIT could be relevant too, especially for governance, but I feel like ISO 27001 is more aligned with cybersecurity specifically.

upvoted 0 times

...

Wilda

4 months ago

I’m not entirely sure, but I think PCI DSS is more focused on payment data security. It might not cover everything a CISO would need.

upvoted 0 times

...

Pete

5 months ago

I remember studying ISO 27001 as a comprehensive framework for information security management. It seems like a strong choice for a CISO.

upvoted 0 times

...

Sonia

5 months ago

I've worked with ISO 27001 before, and that seems like the most likely option. It's a comprehensive framework for information security management that could help the organization showcase its security efforts.

upvoted 0 times

...

Blair

5 months ago

I'm a bit confused by the options. ITIL is more focused on IT service management, right? And PCI DSS is specific to the payment card industry. I'm not sure if either of those would be the CISO's top choice in this case.

upvoted 0 times

...

Lenna

5 months ago

Okay, let's see. The CISO is looking for a framework to help demonstrate the organization's investment in data protection tools and systems. I'm thinking COBIT or ISO 27001 might be the best fit here.

upvoted 0 times

...

Darrel

5 months ago

Hmm, I'm not too familiar with all the different cybersecurity frameworks. I'll have to think this through carefully and try to eliminate the options that don't seem to fit.

upvoted 0 times

...

Gail

5 months ago

This seems like a straightforward question about cybersecurity frameworks. I'm pretty confident I can narrow it down to the correct answer.

upvoted 0 times

...

Britt

5 months ago

From what I remember, a Virtual Distributed Switch is the key requirement to set up LAG in an ESXi environment. I'll double-check, but I'm leaning towards A.

upvoted 0 times

...

Olive

5 months ago

Okay, let's see. The current version is 3.1.2, and the latest version is 3.109 from December 2011. I'm not sure if that means I can update to 3.109 or not.

upvoted 0 times

...

Ollie

2 years ago

I'm not sure, but I think COBIT could also be a good choice for demonstrating investment in cybersecurity.

upvoted 0 times

...

Kenneth

2 years ago

I agree with you, ISO 27001 is a widely recognized cybersecurity framework.

upvoted 0 times

...

Velda

2 years ago

Hmm, ITIL is all about IT service management, not security. PCI DSS is for the payment card industry, so that's not it either. ISO 27001 is the clear choice.

upvoted 0 times

...