Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 1 Question 13 Discussion

Posted by Pamella on May 08, 2022 at 02:52 PM

Which of the following approaches can be used to build a security program?

Each correct answer represents a complete solution. Choose all that apply.

Suggested Answer: C, D

Top-Down Approach is an approach to build a security program.

The initiation, support, and direction come from the top management and work their way through middle management and then to staff

members.

It is treated as the best approach.

This approach ensures that the senior management, who is ultimately responsible for protecting the company assets, is driving the

program.

Bottom-Up Approach is an approach to build a security program.

The lower-end team comes up with a security control or a program without proper management support and direction.

It is less effective and doomed to fail.

Answer A and B are incorrect. No such types of approaches exist


Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
LO
Lorrie 11 months ago
Not sure about the Left-Up Approach, sounds sketchy.
AN
Antione 12 months ago
I agree, Top-Down is the way to go!
LO
Louis 12 months ago
Wait, what’s the Right-Up Approach? Never heard of that!
MA
Marta 12 months ago
I think the Bottom-Up Approach is underrated.
FE
Felicidad 1 year ago
Definitely the Top-Down Approach is a must!
PO
Pok 1 year ago
I feel like the Top-Down Approach is the most common one, but I can't recall if the Left-Up Approach is actually a thing.
TA
Taryn 1 year ago
I think the Bottom-Up Approach is also valid, but I need to double-check if it was included in our practice questions.
SH
Sherell 1 year ago
I remember studying the Top-Down Approach; it seems like a solid way to start a security program.
MA
Marnie 1 year ago
I’m not entirely sure about the Right-Up and Left-Up Approaches. Were those mentioned in the textbook?
KI
Kirk 1 year ago
This is a good test of our understanding of the data science project lifecycle. Interviewing stakeholders is a key part of the discovery phase, where you're laying the groundwork for the rest of the project. I'm confident option A is the right answer here.
KI
Kimi 1 year ago
I feel like I remember something about the "X-Forwarded-For" header being important for identifying client IPs. That sounds right, but I'm a bit unsure.
LA
Lashawnda 1 year ago
I'm feeling pretty confident about this. I think the answer is D - the Server Protect services stopping would trigger that alert.
CH
Cheryll 1 year ago
The question is focused on security testing, and the team has an expert in that area. I believe option D, performing exploratory testing sessions with security-focused charters, would be the least important test activity here.
0/2000 characters

Save Cancel