MENU
Which of the following CIS Controls is used to manage the security lifecycle by validating that the documented controls are in place?
Suggested Answer: D
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
FA
Fabiola
11 months ago
Surprised that people think B is the answer, I always thought it was more about A!
CA
Callie
11 months ago
A is crucial too, but I see why B is the answer.
ST
Stevie
11 months ago
Wait, is it really B? I thought it was C!
GL
Glen
11 months ago
I disagree, I feel like D is more relevant here.
CR
Cristal
11 months ago
I think it's definitely B, Account Monitoring and Control.
NI
Nicolette
11 months ago
I’m leaning towards C, but I’m not confident. Data protection seems important, but does it really manage the security lifecycle?
SA
Salina
12 months ago
I practiced a question similar to this, and I think it was about administrative privileges. So maybe A?
KE
Keva
12 months ago
I feel like it's B, but I can't recall if that specifically covers the lifecycle aspect. I need to double-check my notes.
BA
Barbra
1 year ago
I think it might be D, but I'm not entirely sure. I remember something about validating controls in the context of penetration tests.
MO
Moira
1 year ago
I think the answer is B - Account Monitoring and Control. That control is specifically about managing user accounts and privileges, which seems like it would be the best way to validate the documented security controls are in place. I'm pretty confident in that one.
SH
Shayne
1 year ago
I'm a bit confused on this one. I was considering A - Controlled Use of Administrative Privilege, since that's about managing access and privileges. But I'm not sure if that's the best fit for the question. Hmm, I'll have to think about it some more.
GA
Galen
1 year ago
Okay, let me think this through. The question is asking about validating the documented controls, so I'm leaning towards C - Data Protection. That control is all about ensuring the security controls are actually in place and working.
MA
Martina
1 year ago
Hmm, I'm not totally sure about this one. I was thinking maybe it could be D - Penetration Tests and Red Team Exercises, since that's about validating the security controls. But I'm not 100% confident on that.
EA
Earnestine
1 year ago
This one seems pretty straightforward. I think the answer is B - Account Monitoring and Control, since that's all about managing user accounts and privileges.
RI
Ricarda
1 year ago
Hmm, I'm a bit unsure about the relationship between Hive and MapReduce. I'll need to think through that part carefully.
NI
Nikita
1 year ago
Hmm, I'm a bit unsure here. The options seem a bit vague. I'd want to get more context before deciding how to approach this.
AN
Annice
1 year ago
This looks like a pretty straightforward question. I think the key is to identify the serverless components that can handle the different aspects of the requirement - running the script, sending email notifications, and processing the email responses.
LE
Leonora
1 year ago
I'm not sure, but I remember discussing that undifferentiated marketing means offering the same product to all. Could it be that?
SI
Sina
1 year ago
Isn't 21 typically for FTP? I just hope I don't mix them up during the exam.
JI
Jimmie
1 year ago
Ah, this is a tricky one. There are a few different documents that could potentially help, but I think the key is figuring out what's going to be most useful for this specific situation. Based on the information provided, I'm leaning towards the requirements document as the best recommendation. That will allow them to really nail down the purpose and target audience before moving forward with the design.
LA
Laquita
1 year ago
Wait, is this a pop quiz? I didn't study for this! *panicked laughter* Seriously though, I'm stuck between B and D. Decisions, decisions...
LA
Lazaro
1 year ago
Ha! Trick question, right? Obviously, the answer is A. Controlled use of administrative privilege is the key to managing the security lifecycle. Gotta keep those admins on a tight leash!
VI
Vi
1 year ago
Oooh, this is a tough one. I'm leaning towards C, since data protection is such a fundamental part of the security lifecycle. But I could be wrong...
IN
Inocencia
1 year ago
I'm still not sure, but I'll go with C for now.
VE
Veda
1 year ago
True, account monitoring is essential for ensuring security measures are in place.
DE
Detra
1 year ago
I agree, but I think B might also be important for managing security controls.
BE
Becky
1 year ago
I think C is a good choice, data protection is crucial for security.
GA
Garry
1 year ago
I'm going with B. Account monitoring and control is crucial for managing the security lifecycle and ensuring the documented controls are actually being implemented.
DO
Dottie
1 year ago
I see your point, but I still think B is the most crucial for managing the security lifecycle.
CO
Coleen
1 year ago
I think D is also important for testing the effectiveness of the controls.
ER
Erick
1 year ago
I agree, B is definitely important for ensuring the controls are in place.
TY
Tyra
1 year ago
Hmm, this one's tricky. I'm guessing D, since penetration tests and red team exercises are all about validating the security controls in place.
CA
Carlee
1 year ago
Yeah, I agree. Penetration tests and red team exercises are essential for validating security controls.
LA
Lamar
1 year ago
I think you're right, D does seem like the best choice for managing the security lifecycle.
DO
Dorsey
1 year ago
I believe it could also be D) Penetration Tests and Red Team Exercises, as they validate the effectiveness of security controls.
DO
Donte
2 years ago
I agree with Beatriz, because monitoring and controlling accounts is essential for security.
BE
Beatriz
2 years ago
I think the answer is B) Account Monitoring and Control.