Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 CISSP Exam - Topic 4 Question 28 Discussion

Which of the following is a security weakness in the evaluation of common criteria (CC) products?
A) The manufacturer can state what configuration of the product is to be evaluated.
B) The product can be evaluated by labs m other countries.
C) The Target of Evaluation's (TOE) testing environment is identical to the operating environment
D) The evaluations are expensive and time-consuming to perform.

ISC2 CISSP Exam - Topic 4 Question 28 Discussion

Actual exam question for ISC2's CISSP exam
Question #: 28
Topic #: 4
[All CISSP Questions]

Which of the following is a security weakness in the evaluation of common criteria (CC) products?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Adell at May 09, 2022, 04:36 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lavonda
8 months ago
Totally agree with A, it gives too much control to the manufacturer.
upvoted 0 times
...
Lawrence
9 months ago
C seems fine to me, identical environments should mean accurate results.
upvoted 0 times
...
Blossom
9 months ago
Wait, can labs in other countries really evaluate? Sounds risky.
upvoted 0 times
...
Sophia
9 months ago
I think D is the biggest issue, costs are crazy!
upvoted 0 times
...
Julio
9 months ago
A is definitely a weakness, manufacturers can game the system.
upvoted 0 times
...
Arlette
9 months ago
I feel like we practiced a question similar to this, and I think the cost and time of evaluations might not be a direct security weakness, but it does affect the overall process.
upvoted 0 times
...
Linn
9 months ago
I think option C might be a problem because if the testing environment is the same as the operating environment, it could overlook real-world vulnerabilities.
upvoted 0 times
...
Lauryn
9 months ago
I remember discussing how the manufacturer having control over the configuration could lead to biased evaluations, but I'm not sure if that's the main weakness.
upvoted 0 times
...
Margart
9 months ago
I’m a bit confused about option B; I thought having labs in different countries could actually enhance the evaluation process rather than weaken it.
upvoted 0 times
...
Gregoria
9 months ago
I think the key here is to focus on the customer's ability to manage their domain configuration and DNS records. The questions about Marketing Cloud access and subdomain delegation seem most relevant.
upvoted 0 times
...
Luisa
10 months ago
Okay, the campaign is focused on driving new subscriptions, so I'm leaning towards the "number of incremental subscriptions" as the best metric to measure the causal impact.
upvoted 0 times
...

Save Cancel