Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CCSP Exam - Topic 3 Question 56 Discussion

Posted by Gertude on Jul 22, 2022 at 06:48 PM

Which of the following frameworks focuses specifically on design implementation and management?

Suggested Answer: A

ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.


Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
GL
Glendora 11 months ago
Wait, HIPAA? I didn't know it had anything to do with design!
TA
Tawny 11 months ago
Totally agree, ISO 31000 is the one for design management!
EM
Emelda 11 months ago
NIST 800-92? I thought that was for IT security guidelines.
BL
Blair 12 months ago
I think ISO 27017 is more focused on cloud security.
MA
Malcolm 12 months ago
ISO 31000:2009 is all about risk management.
GO
Goldie 1 year ago
I vaguely recall that ISO 27017 is related to cloud security, but I can't remember if it touches on design management.
JO
Jonelle 1 year ago
I feel like HIPAA is more about healthcare regulations, so it probably doesn't fit the question about design implementation.
TI
Tijuana 1 year ago
I remember studying NIST 800-92, but I thought it was more about security guidelines rather than design management.
ET
Ettie 1 year ago
I think ISO 31000:2009 might be the right answer since it deals with risk management, but I'm not entirely sure if it focuses on design implementation specifically.
SA
Samira 1 year ago
I'm a bit confused on this one. I know X-rays are a type of radiation, but I'm not sure if they're considered an "Image generation" technique. I'll have to think about this a bit more.
JO
Johnathon 1 year ago
This question seems pretty straightforward. I'll read it carefully and think about the key business factors that could impact the scope and type of benchmark.
KA
Kattie 1 year ago
Hmm, I'm not sure about this one. The packet capture doesn't seem to show a clear pattern of a TCP flood or DNS flood. I'll need to think this through a bit more carefully.
0/2000 characters

Save Cancel