MENU
You have been hired as the Information System Security Officer (ISSO) for a US federal government agency. Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation.
Which of the following is NOT documented in the SSP?
Suggested Answer: C
Get Premium 712-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
CU
Curt
11 months ago
Agreed, A and C are definitely in the SSP.
ZE
Zena
11 months ago
Wait, are you sure D isn't documented? That seems important!
OL
Ollie
11 months ago
I think B is the odd one out here.
EL
Elke
12 months ago
Definitely not C, third-party audits are crucial!
LO
Louvenia
12 months ago
The SSP usually includes controls and system info.
DE
Detra
1 year ago
I practiced a similar question, and I think the results of third-party audits might not be included in the SSP, but I can't remember for sure.
JO
Josefa
1 year ago
I feel like all the options could be relevant, but I vaguely recall that the type of information used in the system is definitely documented in the SSP.
ST
Stephane
1 year ago
I remember studying that the name of the connected system is usually not part of the SSP. It seems like a detail that might be left out.
JO
Joana
1 year ago
I think the SSP should include the controls in place, but I'm not sure if it covers the results of third-party audits.
DO
Dominga
1 year ago
I feel pretty confident about this. The system security plan is all about documenting the security controls, not the specific type of information used in the system. That's a separate consideration.
CH
Chaya
1 year ago
I'm a little confused on this one. The system security plan seems to cover a lot of different elements, so I'll need to double-check my understanding of what's typically included versus what might be in other documents.
VI
Virgie
1 year ago
Okay, I've got this. The system security plan is focused on the security controls in place, not the type of information used in the system. That's likely covered elsewhere in the documentation.
CE
Celestina
1 year ago
This seems like a straightforward question about the contents of a system security plan. I'll carefully review each option and think through what should and shouldn't be included.
FL
Flo
1 year ago
Hmm, I'm a bit unsure about this one. The system security plan covers a lot of details, so I'll need to think carefully about what's typically documented versus what might be handled elsewhere.
VI
Viola
2 years ago
This is easy, the answer is B. Who cares about the name of the connected system? That's like the least important thing in the SSP.
SH
Sheridan
2 years ago
Hmm, I'm going to go with C. The results of third-party audits are crucial for the SSP, so that can't be the right answer.
HO
Honey
2 years ago
D) Type of information used in the system
JA
Jackie
2 years ago
C) The results of a third-party audits and recommendations
KE
Kenda
2 years ago
B) Name of the connected system
GL
Glory
2 years ago
A) The controls in place to secure the system
AL
Alpha
2 years ago
User 3: I agree with Alpha, the type of information used in the system is not typically documented in the SSP.
ME
Melissia
2 years ago
User 2: No, that's actually documented in the SSP. I believe the correct answer is D) Type of information used in the system.
CA
Cassie
2 years ago
I think the answer is B) Name of the connected system.
JU
Justine
2 years ago
I'm not sure about this one. I think it might be D) Type of information used in the system because that seems like crucial information to document.
MI
Micaela
2 years ago
I agree with Regenia. The name of the connected system is not typically documented in the SSP.
MY
Myra
2 years ago
Wait, did you hear about the ISSO who forgot to include the coffee machine in the SSP? Talk about a security breach!
VI
Vivan
2 years ago
C) The results of a third-party audits and recommendations
OC
Ocie
2 years ago
B) Name of the connected system
AL
Alline
2 years ago
A) The controls in place to secure the system
RE
Regenia
2 years ago
I think the answer is B) Name of the connected system.
BL
Blair
2 years ago
I think the answer is B. The name of the connected system is not typically documented in the SSP. That's usually covered in another document.
BE
Beckie
2 years ago
That's usually covered in another document.
DA
Dahlia
2 years ago
I agree, the name of the connected system is not typically documented in the SSP.
KA
Kayleigh
2 years ago
D) Type of information used in the system
LA
Lashon
2 years ago
C) The results of a third-party audits and recommendations
HA
Haydee
2 years ago
B) Name of the connected system
JO
Joaquin
2 years ago
A) The controls in place to secure the system