Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 CISSP Exam - Topic 5 Question 54 Discussion

In setting expectations when reviewing the results of a security test, which of the following statements is MOST important to convey to reviewers?
C) The accuracy of testing results can be greatly improved if the target(s) are properly hardened.
A) The target's security posture cannot be further compromised.
B) The results of the tests represent a point-in-time assessment of the target(s).
D) The deficiencies identified can be corrected immediately

ISC2 CISSP Exam - Topic 5 Question 54 Discussion

Actual exam question for ISC2's CISSP exam
Question #: 54
Topic #: 5
[All CISSP Questions]

In setting expectations when reviewing the results of a security test, which of the following statements is MOST important to convey to reviewers?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Nichelle at Jun 13, 2022, 05:21 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Edison
8 months ago
D seems too optimistic; not all deficiencies can be fixed right away!
upvoted 0 times
...
Ahmad
8 months ago
C is interesting, but not sure if hardening always leads to better results.
upvoted 0 times
...
Jade
9 months ago
Wait, can we really say the security can't be compromised? Sounds risky.
upvoted 0 times
...
Desmond
9 months ago
I agree, B is crucial for setting realistic expectations.
upvoted 0 times
...
Danica
9 months ago
Definitely B, it's all about that point-in-time snapshot.
upvoted 0 times
...
Phuong
9 months ago
I think option D is a bit too optimistic. Not all deficiencies can be fixed immediately, right? I remember seeing a similar question in our review materials.
upvoted 0 times
...
Marget
9 months ago
I recall discussing how the accuracy of results can change based on the target's hardening, so option C could be relevant too.
upvoted 0 times
...
Paulene
9 months ago
I'm not entirely sure, but I feel like option A might be misleading. Just because we say the security posture can't be compromised doesn't mean it's true.
upvoted 0 times
...
Lashunda
9 months ago
I think option B is really important because it emphasizes that the results are just a snapshot in time. I remember practicing a question like this.
upvoted 0 times
...
Tien
9 months ago
Okay, I've got this. The best way to mitigate the risk of malware in firmware updates is to ensure that only trusted administrators can install the updates, so I'm going with option C.
upvoted 0 times
...
Donte
9 months ago
Ah yes, network slicing - this is the kind of question I was hoping to see. I've got a good handle on the core principles, so I'm feeling confident about this one.
upvoted 0 times
...
Vicki
9 months ago
Octopus Deploy is a deployment automation tool, so I don't think that's the right answer here. We're looking for a tool that can analyze dependencies and identify security issues, not just deploy the application.
upvoted 0 times
...
Lanie
10 months ago
Wait, I'm a little confused. Does the report need to be both financial and non-financial, or just complete and relevant? I'll have to re-read the question carefully before answering.
upvoted 0 times
...

Save Cancel