New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 2 Question 2 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 2
Topic #: 2
[All ISSEP Questions]

Which of the following Security Control Assessment Tasks gathers the documentation and supporting materials essential for the assessment of the security controls in the information system?

Show Suggested Answer Hide Answer
Suggested Answer: C

Security Control Assessment Task 1 gathers the documentation and supporting materials essential for the assessment of the security controls in the information system.

Answer option D is incorrect. Security Control Assessment Task 2 develops methods and procedures.

Answer option B is incorrect. Security Control Assessment Task 3 evaluates the operational,

technical, and the management security controls of the information system using the techniques and measures selected or developed.

Answer option A is incorrect. Security Control Assessment Task 4 prepares the final security assessment report.


Contribute your Thoughts:

0/2000 characters
Britt
3 months ago
Wait, are we sure about Task 4? Sounds off to me.
upvoted 0 times
...
Aileen
3 months ago
I agree, Task 4 makes the most sense!
upvoted 0 times
...
Laurena
3 months ago
Task 1 seems too early for documentation gathering.
upvoted 0 times
...
Joseph
4 months ago
I thought it was Task 3, but I could be wrong.
upvoted 0 times
...
Bettina
4 months ago
It's definitely Security Control Assessment Task 4.
upvoted 0 times
...
Daren
4 months ago
I think I know the answer, but I want to double-check my understanding before selecting an option. These security control assessment tasks can be tricky to keep straight.
upvoted 0 times
...
Leigha
4 months ago
I'm a little confused by the wording of these options. I'll need to review my notes on the different security control assessment tasks to make sure I understand the differences.
upvoted 0 times
...
Doyle
4 months ago
Okay, I've got this. Security Control Assessment Task 4 is the one that gathers the essential documentation for the security control assessment.
upvoted 0 times
...
Lewis
4 months ago
Hmm, I'm a bit unsure about this one. The options all sound similar, so I'll need to really focus on the key differences between the tasks.
upvoted 0 times
...
Van
5 months ago
This question seems straightforward. I'll carefully read through the options and think about which task is focused on gathering documentation.
upvoted 0 times
...
Goldie
5 months ago
I think Task 2 is related to implementation, but I could be mixing it up with another question we practiced.
upvoted 0 times
...
Janessa
5 months ago
I’m a bit confused. Wasn't Task 1 about initial assessments? I can't remember if it involved documentation.
upvoted 0 times
...
Verona
5 months ago
I feel like Task 4 might be the right answer. I recall a practice question that focused on collecting supporting materials.
upvoted 0 times
...
Ocie
5 months ago
I think it's Security Control Assessment Task 3, but I'm not entirely sure. I remember it had something to do with gathering documentation.
upvoted 0 times
...
Bernardine
5 months ago
Hmm, the hierarchy of the elements is a bit confusing. I'll need to double-check the relationships between BlockX, BlockY, and ActionZ.
upvoted 0 times
...
Krystina
5 months ago
I think I'd start by trying option B and see if I can identify any network traffic from the 'Private' tagged resources. That could give me some good context before I dive into the config queries.
upvoted 0 times
...
Sarah
5 months ago
Okay, I remember learning about these map projections in class. For a long distance route like this cruise, I bet the azimuthal equidistant projection would give the most accurate distance calculations.
upvoted 0 times
...
Apolonia
5 months ago
I think option C sounds right because it mentions written descriptions and how the behavior must be measured, but I'm not entirely certain.
upvoted 0 times
...
Moon
5 months ago
This seems pretty straightforward - we'd want to use the first-party data like email or phone number that the retailer captures in-store to track the effectiveness of their Facebook campaigns.
upvoted 0 times
...

Save Cancel