ISC2 CSSLP Exam - Topic 7 Question 56 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 56
Topic #: 7

Which of the following steps of the LeGrand Vulnerability-Oriented Risk Management method determines the necessary compliance offered by risk management practices and assessment of risk levels?

AAssessment, monitoring, and assurance

BVulnerability management

CRisk assessment

DAdherence to security standards and policies for development and deployment

Show Suggested Answer

Suggested Answer: A

Assessment, monitoring, and assurance determines the necessary compliance that are offered by risk management practices and assessment

of risk levels.

by Howard at Aug 21, 2022, 04:57 PM

Limited Time Offer

25%

Off

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ozell

3 months ago

Wait, I thought it was D! That's unexpected!

upvoted 0 times

...

Gerri

3 months ago

I agree with C, it makes the most sense.

upvoted 0 times

...

Edward

3 months ago

I’m not so sure about that, could be B as well.

upvoted 0 times

...

Francesco

4 months ago

I think it's A, monitoring is crucial too.

upvoted 0 times

...

Mohammad

4 months ago

Definitely C, risk assessment is key!

upvoted 0 times

...

Noble

4 months ago

I’m leaning towards A, but I also see how D could fit. This is tricky!

upvoted 0 times

...

Adolph

4 months ago

I feel like assessment, monitoring, and assurance could relate to compliance, but I can't recall the details clearly.

upvoted 0 times

...

Frederica

4 months ago

I remember a practice question that focused on adherence to standards, so maybe D is the right choice here.

upvoted 0 times

...

Dominga

5 months ago

I think the answer might be C, Risk assessment, but I'm not entirely sure if that covers compliance specifically.

upvoted 0 times

...

Lezlie

5 months ago

Okay, let me break this down step-by-step. The key is understanding how the --p option works and what the "Stop" profile means in this context.

upvoted 0 times

...

Arthur

5 months ago

Okay, let's think this through. We need to evaluate the vendor package before acquiring it, so seeing it run on our current system makes the most sense. I'll select that option.

upvoted 0 times

...

Clarence

5 months ago

This seems like a straightforward question about company policies. I'm pretty confident the answer is Information Security Policy (ISP).

upvoted 0 times

...