Discuss ISC2 CCSP Exam Topic 5 Question 13

The baseline should cover which of the following?

AData breach alerting and reporting

BAll regulatory compliance requirements

CAs many systems throughout the organization as possible

DA process for version control

Suggested Answer: C

The more systems that be included in the baseline, the more cost-effective and scalable the baseline is. The baseline does not deal with breaches or version control; those are the provinces of the security office and CMB, respectively. Regulatory compliance might (and usually will) go beyond the baseline and involve systems, processes, and personnel that are not subject to the baseline.

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Glenn 11 months ago

Not sure if we can cover *all* systems realistically.

Jesse 12 months ago

I agree, all systems should be included in the baseline!

Gianna 12 months ago

Surprised that version control is even an option here.

Jacinta 12 months ago

I think data breach alerting is crucial too!

Trinidad 1 year ago

Definitely needs to cover all regulatory compliance requirements.

Nu 1 year ago

Version control seems less critical for a baseline, but I guess it could be relevant in some contexts.

Huey 1 year ago

I remember a practice question that mentioned data breach alerting and reporting as part of the baseline, so that might be important too.

Tamesha 1 year ago

I think the baseline should definitely include all regulatory compliance requirements, but I'm not entirely sure if that's the only thing it should cover.

Jimmie 1 year ago

I feel like the baseline should cover as many systems as possible, but I can't recall if that's the main focus or just a part of it.

Phung 1 year ago

I'm a bit unsure on this one. I'll need to review my notes on the Lean Enterprise framework to refresh my memory on the different core competencies.

Tiera 1 year ago

Ah, I've seen questions like this before. I'm pretty confident I can identify the correct statements about IPv6 address configuration. Let me go through the options systematically.

Floyd 1 year ago

Hmm, not sure about this one. I'll have to eliminate the options I'm less certain about and then make an educated guess on the remaining choices.

ISC2 CCSP Exam - Topic 5 Question 13 Discussion