MENU
As a security manger which of the following is the MOST effective practice for providing value to an organization?
Suggested Answer: C
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
40 comments · newest first
MA
Marsha
10 months ago
Coordinating with internal audit (B) is super important too!
AN
Antonio
11 months ago
Surprised that C is even an option, compliance isn't everything!
SA
Sabine
11 months ago
I agree, A makes the most sense for value.
NO
Nobuko
11 months ago
Not sure if A is the best, what about D?
MA
Marion
11 months ago
A is definitely the way to go!
GL
Glendora
12 months ago
Protecting confidential information is crucial, but I wonder if just identifying it is enough. D might be too narrow of a focus compared to A.
MY
Myong
12 months ago
I feel like achieving compliance is important, but just focusing on that without addressing technical issues seems risky. C doesn't seem like the best option to me.
KE
Kenny
12 months ago
I'm not entirely sure, but I think coordinating with internal audit might help in aligning security with business goals. Maybe B is worth considering?
DI
Dion
1 year ago
I remember we discussed the importance of assessing business risk in our last study session. It seems like A could be the right choice.
AN
Annita
1 year ago
Protecting confidential information is definitely important, but I'm not sure that's the most effective practice overall. I think I'll go with assessing business risk and applying security resources accordingly.
GA
Gail
1 year ago
Hmm, I'm a bit confused on this one. I'm not sure if coordinating with internal audit or just focusing on compliance is the best approach. I'll need to think this through carefully.
LA
Lauran
1 year ago
This is a great question! I think the key is to focus on providing the most value to the organization, which means assessing business risk and applying security resources accordingly.
PE
Pedro
1 year ago
Achieving compliance regardless of technical issues doesn't seem like the right approach to me. As a security manager, I need to balance compliance with practical security measures that actually protect the organization.
TA
Tammy
1 year ago
This looks like a straightforward resource management question. I'll start by checking the current resource limits for the namespace and the deployment, then update the deployment to meet the requirements.
AZ
Azalee
1 year ago
Okay, let me see. Allopurinol is used to treat gout, so I'm guessing it has something to do with adjusting the levels of drugs that affect uric acid metabolism. I'll have to carefully consider each option.
AR
Artie
1 year ago
I'm pretty sure the answer is 'all of the above'. Security is a multifaceted beast, you can't just pick one practice and call it a day.
YV
Yvonne
1 year ago
D) Identify confidential information and protect it
EZ
Ezekiel
1 year ago
C) Achieve compliance regardless of related technical issues
LE
Letha
1 year ago
B) Coordinate security implementations with internal audit
CE
Celestina
1 year ago
A) Assess business risk and apply security resources accordingly
NO
Nobuko
1 year ago
Protecting confidential information is crucial, but it's not the complete picture. A broader risk-based approach is needed.
SH
Shaun
1 year ago
B) Coordinate security implementations with internal audit
CA
Cassie
1 year ago
D) Identify confidential information and protect it
IZ
Izetta
1 year ago
A) Assess business risk and apply security resources accordingly
CO
Colene
1 year ago
B) Coordinate security implementations with internal audit
MI
Milly
1 year ago
D) Identify confidential information and protect it
BI
Billy
1 year ago
A) Assess business risk and apply security resources accordingly
VE
Veta
1 year ago
Achieving compliance is good, but it shouldn't be the sole driver. There could be technical issues that need addressing too.
LU
Luz
1 year ago
D) Identify confidential information and protect it
LA
Lashawn
1 year ago
B) Coordinate security implementations with internal audit
DE
Denny
1 year ago
A) Assess business risk and apply security resources accordingly
NA
Natalya
1 year ago
Coordinating with internal audit is important, but it's not the 'MOST effective' practice on its own. We need a more holistic view.
RE
Reyes
1 year ago
A) Assess business risk and apply security resources accordingly
GL
Glory
1 year ago
B) Coordinate security implementations with internal audit
CL
Clay
1 year ago
D) Identify confidential information and protect it
SH
Sherita
1 year ago
A) Assess business risk and apply security resources accordingly
GA
Galen
1 year ago
Option A seems like the most practical approach. Aligning security efforts with business needs is key to providing value.
LE
Leota
1 year ago
I think achieving compliance regardless of technical issues is also important. It shows that the organization is following regulations.
JU
Juliana
1 year ago
I agree with Adolph. By assessing business risk, we can prioritize security measures where they are needed most.
AD
Adolph
1 year ago
I think the most effective practice is to assess business risk and apply security resources accordingly.