Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CAP Exam - Topic 9 Question 7 Discussion

Posted by Kasandra on May 07, 2022 at 01:06 PM

Which of the following RMF phases is known as risk analysis?

Suggested Answer: C

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
17 comments · newest first
CH
Chaya 11 months ago
I always get confused with these phases, but I think you're right!
TE
Tequila 12 months ago
Yup, Phase 2 for sure!
LE
Leatha 12 months ago
Wait, is it really Phase 2? I thought it was Phase 1.
GL
Glendora 12 months ago
Totally agree, Phase 2 is where the real analysis happens.
WH
Whitley 1 year ago
It's Phase 2, that's the risk analysis phase!
CR
Crissy 1 year ago
I feel like Phase 3 is more about implementation, so it has to be either Phase 1 or Phase 2 for risk analysis.
CL
Clay 1 year ago
I want to say it's Phase 2, but I might be mixing it up with the assessment phase.
TA
Talia 1 year ago
I remember practicing a question about RMF phases, and I think Phase 1 was related to categorization, not risk analysis.
JU
Judy 1 year ago
I think risk analysis is part of Phase 2, but I'm not completely sure. It could also be in Phase 1.
KR
Kristian 1 year ago
Okay, I think I've got this. The key is to maximize security, so I'm leaning towards generating a shared access signature (SAS) to control access to the storage account.
MA
Mable 1 year ago
Hmm, I'm a bit unsure about the "dynamic rules" option. I'm not sure if that's something that can be A/B tested. I'd probably go with B or D.
SO
Sonia 1 year ago
I'm a bit confused by the different options presented. They all seem to involve modifying the syslog remote-servers configuration, but I'm not sure which one is the correct command. I'll have to carefully read through each one and try to understand the differences.
WI
Wilda 1 year ago
Okay, let's see here. All test cases should be automated? I'm not sure I agree with that one. But the other points seem pretty solid. I'll have to weigh the options and make my best guess.
EM
Emerson 1 year ago
I vaguely remember that BGP has some limitations, but I'm not sure if it affects convergence time for route availability in this case.
CH
Charisse 1 year ago
I remember our discussion on board dynamics; it sounds like a classic case of board members prioritizing their own interests over the organization's.
CO
Corinne 1 year ago
I'm a bit confused about the case sensitivity of the cached comparisons. I'll need to double-check that detail.
HA
Haydee 1 year ago
Okay, let's see. A brute force attack is when you try every possible combination, right? So the answer has to be A. Easy peasy!
0/2000 characters

Save Cancel