Discuss ISC2 ISSEP Exam Topic 2 Question 2

Which of the following Security Control Assessment Tasks gathers the documentation and supporting materials essential for the assessment of the security controls in the information system?

ASecurity Control Assessment Task 4

BSecurity Control Assessment Task 3

CSecurity Control Assessment Task 1

DSecurity Control Assessment Task 2

Suggested Answer: C

Security Control Assessment Task 1 gathers the documentation and supporting materials essential for the assessment of the security controls in the information system.

Answer option D is incorrect. Security Control Assessment Task 2 develops methods and procedures.

Answer option B is incorrect. Security Control Assessment Task 3 evaluates the operational,

technical, and the management security controls of the information system using the techniques and measures selected or developed.

Answer option A is incorrect. Security Control Assessment Task 4 prepares the final security assessment report.

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

19 comments · newest first

Britt 11 months ago

Wait, are we sure about Task 4? Sounds off to me.

Aileen 11 months ago

I agree, Task 4 makes the most sense!

Laurena 11 months ago

Task 1 seems too early for documentation gathering.

Joseph 11 months ago

I thought it was Task 3, but I could be wrong.

Bettina 11 months ago

It's definitely Security Control Assessment Task 4.

Daren 11 months ago

I think I know the answer, but I want to double-check my understanding before selecting an option. These security control assessment tasks can be tricky to keep straight.

Leigha 12 months ago

I'm a little confused by the wording of these options. I'll need to review my notes on the different security control assessment tasks to make sure I understand the differences.

Doyle 12 months ago

Okay, I've got this. Security Control Assessment Task 4 is the one that gathers the essential documentation for the security control assessment.

Lewis 12 months ago

Hmm, I'm a bit unsure about this one. The options all sound similar, so I'll need to really focus on the key differences between the tasks.

Van 1 year ago

This question seems straightforward. I'll carefully read through the options and think about which task is focused on gathering documentation.

Goldie 1 year ago

I think Task 2 is related to implementation, but I could be mixing it up with another question we practiced.

Janessa 1 year ago

I’m a bit confused. Wasn't Task 1 about initial assessments? I can't remember if it involved documentation.

Verona 1 year ago

I feel like Task 4 might be the right answer. I recall a practice question that focused on collecting supporting materials.

Ocie 1 year ago

I think it's Security Control Assessment Task 3, but I'm not entirely sure. I remember it had something to do with gathering documentation.

Bernardine 1 year ago

Hmm, the hierarchy of the elements is a bit confusing. I'll need to double-check the relationships between BlockX, BlockY, and ActionZ.

Krystina 1 year ago

I think I'd start by trying option B and see if I can identify any network traffic from the 'Private' tagged resources. That could give me some good context before I dive into the config queries.

Sarah 1 year ago

Okay, I remember learning about these map projections in class. For a long distance route like this cruise, I bet the azimuthal equidistant projection would give the most accurate distance calculations.

Apolonia 1 year ago

I think option C sounds right because it mentions written descriptions and how the behavior must be measured, but I'm not entirely certain.

Moon 1 year ago

This seems pretty straightforward - we'd want to use the first-party data like email or phone number that the retailer captures in-store to track the effectiveness of their Facebook campaigns.

ISC2 ISSEP Exam - Topic 2 Question 2 Discussion