Discuss ISC2 CISSP Exam Topic 2 Question 61

What is the MAIN purpose of a security assessment plan?

AProvide guidance on security requirements, to ensure the identified security risks are properly addressed based on the recommendation

BProvide the objectives for the security and privacy control assessments and a detailed roadmap of how to conduct such assessments.

CProvide technical information to executives to help them understand information security postures and secure funding.

DProvide education to employees on security and privacy, to ensure their awareness on policies and procedures

Suggested Answer: B

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Afton 11 months ago

Surprised that C is even an option, funding isn't the main goal here!

Carma 11 months ago

Wait, are we sure it's not just for educating employees? D seems important.

Brandon 12 months ago

But isn't it more about the roadmap for assessments? B makes sense too.

Leonor 12 months ago

Totally agree, option A seems spot on!

Annice 12 months ago

I think it's definitely about addressing security risks.

Maxima 1 year ago

I recall that employee education is crucial, but I don’t think that’s the main purpose of a security assessment plan. So, I’d probably rule out option D.

Venita 1 year ago

I feel like option C could be important, but it seems more about communication than the actual assessment plan. I’m confused!

Cecilia 1 year ago

I’m not entirely sure, but I remember something about addressing security risks. Maybe it’s option A? That one seems relevant too.

Kris 1 year ago

I think the main purpose is to outline how to conduct the assessments, so I’m leaning towards option B. It sounds familiar from our practice questions.

Amira 1 year ago

I'm a bit confused by all the technical details here. Let me re-read the question carefully and try to break it down step-by-step. I want to make sure I understand the requirements before selecting my answers.

Tarra 1 year ago

Hmm, this seems like a tricky one. I'll have to review my notes on path restoration policies to figure this out.

Portia 1 year ago

Okay, I think I've got this. The key is to use the correct method and parameter order for creating the custom object. Let me double-check the options and select the right one.

ISC2 CISSP Exam - Topic 2 Question 61 Discussion