When defining a set of security controls to mitigate a risk, which of the following actions MUST occur?
Suggested Answer: A
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
OR
Oretha
11 months ago
Totally agree, evaluating each control is crucial for security!
KR
Kris
12 months ago
Surprised to see "evenly divided the risk" as an option, that doesn't make sense!
LA
Laticia
12 months ago
I think the control set just needs to adequately mitigate the risk.
AL
Alita
12 months ago
I disagree, not every control needs to completely mitigate the risk.
KE
Kendra
1 year ago
Each control's effectiveness should definitely be evaluated!
LI
Lina
1 year ago
I think we practiced a question similar to this, and it emphasized that the control set should adequately mitigate the risk, which sounds like option C again.
KI
Kiley
1 year ago
I'm a bit unsure about this one. I feel like we talked about evaluating controls individually, but I'm not sure if that's a must.
ED
Edmond
1 year ago
I remember discussing how not every control needs to completely mitigate the risk, so I think option C might be the right choice.
CE
Celia
1 year ago
I vaguely recall something about evenly distributing risk among controls, but that doesn't seem right. I think option D is definitely not the answer.
TR
Tracey
1 year ago
This seems like a straightforward question about service-oriented architecture. I'll focus on understanding the key concepts of service composition and recomposition.
LA
Lashon
1 year ago
Okay, let me think this through. Quality assurance is about preventing defects, so I'm guessing the answer is either B or C. Conducting a test to prevent defects from reaching customers sounds like a good quality assurance practice.
HO
Hobert
1 year ago
Okay, let me think this through step-by-step. I need to focus on the key terms and how they relate to each other.