ISC2 CCSP Exam - Topic 1 Question 23 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 23
Topic #: 1

[All CCSP Questions]

Which of the following best describes the Organizational Normative Framework (ONF)?

AA set of application security, and best practices, catalogued and leveraged by the organization

BA container for components of an application's security, best practices catalogued and leveraged by the organization

CA framework of containers for some of the components of application security, best practices, catalogued and leveraged by the organization

DA framework of containers for all components of application security, best practices, catalogued and leveraged by the organization.

Show Suggested Answer

Suggested Answer: D

Option B is incorrect, because it refers to a specific applications security elements, meaning it is about an ANF, not the ONF. C is true, but not as complete as D, making D the better choice. C suggests that the framework contains only ''some'' of the components, which is why B (which describes ''all'' components) is better

by Ammie at May 09, 2022, 04:24 AM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dorthy

4 months ago

Not sure if "all components" is accurate, feels a bit too broad.

upvoted 0 times

...

Lea

4 months ago

Option D seems the most comprehensive to me!

upvoted 0 times

...

Amber

4 months ago

Surprised there's no mention of specific security measures in the options.

upvoted 0 times

...

Paris

4 months ago

I agree, but isn't it more about all components?

upvoted 0 times

...

Jolanda

5 months ago

I think it's definitely about application security best practices.

upvoted 0 times

...

Nichelle

5 months ago

I’m a bit confused; I thought the ONF was more about best practices rather than being a framework of containers. Maybe it’s A?

upvoted 0 times

...

Oretha

5 months ago

I feel like I studied that the ONF is a comprehensive framework, which makes me think option D could be the right choice.

upvoted 0 times

...

Elvera

5 months ago

I remember a practice question that mentioned "containers" in relation to application security, so I might lean towards option C.

upvoted 0 times

...

Deane

5 months ago

I think the ONF is about organizing security practices, but I'm not sure if it includes all components or just some.

upvoted 0 times

...

Verona

5 months ago

This seems like a tricky question, but I think I can figure it out. I'll need to carefully read through the options and think about the requirements.

upvoted 0 times

...

Lauran

5 months ago

I'll start by eliminating the options that don't seem relevant, then focus in on the most likely locations for the local Traps logs. Gotta love these tricky forensics questions!

upvoted 0 times

...