ISC2 CISSP Exam - Topic 4 Question 67 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 67
Topic #: 4

Refer to the information below to answer the question.

An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have been tightly integrated into normal IT operations and are not separate and distinct roles.

When determining appropriate resource allocation, which of the following is MOST important to monitor?

ANumber of system compromises

BNumber of audit findings

CNumber of staff reductions

DNumber of additional assets

Show Suggested Answer

Suggested Answer: C

by Jennifer at Feb 27, 2023, 11:20 AM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Anastacia

8 months ago

Wait, are they really cutting staff during a security crisis?

upvoted 0 times

...

Sheridan

8 months ago

Totally agree, system compromises are a big deal.

upvoted 0 times

...

Alline

9 months ago

Audit findings are key for compliance!

upvoted 0 times

...

Kayleigh

9 months ago

Not sure if that's the most important...

upvoted 0 times

...

Willow

9 months ago

Gotta keep an eye on system compromises!

upvoted 0 times

...

Wilford

9 months ago

I feel like the number of audit findings could reflect the overall security posture, but I wonder if system compromises would give a clearer picture of risk.

upvoted 0 times

...

Royal

9 months ago

Honestly, I’m a bit confused. Shouldn’t we also consider the impact of staff reductions? But I guess that’s not directly tied to security effectiveness.

upvoted 0 times

...

Vivan

9 months ago

I remember a practice question that emphasized audit findings as a key metric, so I might lean towards option B.

upvoted 0 times

...

Janine

9 months ago

I think monitoring the number of system compromises is crucial, but I'm not entirely sure if that's the best indicator for resource allocation.

upvoted 0 times

...

Carol

9 months ago

This seems straightforward enough. I'm pretty confident that Syslog Manager is the right answer based on the features described in the question.

upvoted 0 times

...

Larae

9 months ago

We practiced questions about IEEE 802.1x recently, and I feel like it's related to network access control. It might be a good choice.

upvoted 0 times

...

Laurel

9 months ago

I think the answer is D. Risk management encompasses assessing the risk, determining how to handle it, and taking appropriate actions. I'm confident in this response.

upvoted 0 times

...

Izetta

10 months ago

I remember that Cisco ENCS 5000 Series is definitely one of the platforms for deploying, but I'm not completely sure about the second one.

upvoted 0 times

...

Clorinda

10 months ago

I feel like emails might not be automatically sent out for the rollback. Is that something that really happens?

upvoted 0 times

...

Leonor

1 year ago

You know, maybe they could just put all the servers in a big hamster ball. Security problem solved!

upvoted 0 times

Shala

1 year ago

A: Definitely, we need to prioritize protecting our systems.

upvoted 0 times

...

Raul

1 year ago

B: I agree, that's crucial for security.

upvoted 0 times

...

Britt

1 year ago

A: I think we should monitor the number of system compromises.

upvoted 0 times

...

Alesia

1 year ago

Wow, talk about a rock and a hard place. Hopefully, they have enough duct tape and paperclips to hold it all together.

upvoted 0 times

...

Van

1 year ago

Adding more assets without proper security oversight? That's just asking for trouble. The number of additional assets is the last thing I'd want to focus on.

upvoted 0 times

Laurel

1 year ago

C) Number of staff reductions

upvoted 0 times

...

Blondell

1 year ago

B) Number of audit findings

upvoted 0 times

...

Page

1 year ago

A) Number of system compromises

upvoted 0 times

...

Pok

1 year ago

Hold on, the number of staff reductions is key here. With fewer people handling security tasks, the risk of something slipping through the cracks is much higher.

upvoted 0 times

Madonna

1 year ago

D) Number of additional assets

upvoted 0 times

...

Salome

1 year ago

C) Number of staff reductions

upvoted 0 times

...

Rosendo

1 year ago

B) Number of audit findings

upvoted 0 times

...

Serina

1 year ago

A) Number of system compromises

upvoted 0 times

...

Britt

1 year ago

D) Number of additional assets

upvoted 0 times

...

Barrie

1 year ago

C) Number of staff reductions

upvoted 0 times

...

Aimee

1 year ago

B) Number of audit findings

upvoted 0 times

...

Kassandra

1 year ago

A) Number of system compromises

upvoted 0 times

...

Maryann

1 year ago

I don't know, the number of audit findings seems like a pretty important thing to keep an eye on. That could indicate where the security gaps are.

upvoted 0 times

Florinda

1 year ago

User 2: I agree, it can help prioritize where to focus resources for security improvements.

upvoted 0 times

...

Pete

1 year ago

User 1: I think monitoring the number of audit findings is crucial for identifying security gaps.

upvoted 0 times

...

Wendell

1 year ago

The number of system compromises is definitely the most important metric to monitor. Maintaining tight security controls is critical, even with reduced staffing.

upvoted 0 times

...