MENU
Which of the following is a security weakness in the evaluation of common criteria (CC) products?
Suggested Answer: A
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
LA
Lavonda
11 months ago
Totally agree with A, it gives too much control to the manufacturer.
LA
Lawrence
12 months ago
C seems fine to me, identical environments should mean accurate results.
BL
Blossom
12 months ago
Wait, can labs in other countries really evaluate? Sounds risky.
SO
Sophia
12 months ago
I think D is the biggest issue, costs are crazy!
JU
Julio
1 year ago
A is definitely a weakness, manufacturers can game the system.
AR
Arlette
1 year ago
I feel like we practiced a question similar to this, and I think the cost and time of evaluations might not be a direct security weakness, but it does affect the overall process.
LI
Linn
1 year ago
I think option C might be a problem because if the testing environment is the same as the operating environment, it could overlook real-world vulnerabilities.
LA
Lauryn
1 year ago
I remember discussing how the manufacturer having control over the configuration could lead to biased evaluations, but I'm not sure if that's the main weakness.
MA
Margart
1 year ago
I’m a bit confused about option B; I thought having labs in different countries could actually enhance the evaluation process rather than weaken it.
GR
Gregoria
1 year ago
I think the key here is to focus on the customer's ability to manage their domain configuration and DNS records. The questions about Marketing Cloud access and subdomain delegation seem most relevant.
LU
Luisa
1 year ago
Okay, the campaign is focused on driving new subscriptions, so I'm leaning towards the "number of incremental subscriptions" as the best metric to measure the causal impact.