Continuous Monitoring is the fourth phase of the security certification and accreditation process. What activities are performed in the Continuous Monitoring process Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B, C
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
23 comments · newest first
CH
Cherelle
10 months ago
I had no idea Continuous Monitoring was so involved!
BU
Buffy
11 months ago
Totally agree with A and B, but C feels a bit off.
LA
Lauryn
11 months ago
Wait, D and E don't belong here, right?
AL
Alexis
11 months ago
I think C is also crucial for continuous monitoring.
SH
Sheridan
11 months ago
Definitely A and B are part of it!
DO
Donette
12 months ago
I feel like security accreditation documentation is important, but I’m not confident if it falls under continuous monitoring or the earlier phases.
TH
Theodora
12 months ago
Configuration management sounds familiar, but I can't recall if it's directly tied to continuous monitoring or if it's more about the initial setup.
NA
Nan
12 months ago
I think security control monitoring is a key activity in this phase, similar to what we practiced in our last mock exam.
FR
France
1 year ago
I remember that status reporting is definitely part of continuous monitoring, but I'm not entirely sure about the specifics of impact analyses.
EV
Eveline
1 year ago
Ah, I've got this! The Continuous Monitoring phase is all about maintaining the security posture of the system, so status reporting, control monitoring, and configuration management are key activities. I'll select B, C, and A to cover all the bases.
LA
Lavelle
1 year ago
Okay, let's see here. I remember from my studies that Continuous Monitoring involves ongoing assessment of the security controls and system changes. I think options B and C are definitely correct, but I'll double-check the other choices to be sure.
OZ
Ozell
1 year ago
Hmm, I'm a bit unsure about this one. The question is asking about the specific activities in the Continuous Monitoring phase, so I'll need to make sure I understand the differences between the various phases to answer this correctly.
MA
Mattie
1 year ago
This looks like a straightforward question on the activities involved in the Continuous Monitoring phase of the security certification and accreditation process. I'll review the options carefully and select all the correct answers.
AS
Asuncion
1 year ago
I think this is asking about the organizational structure that combines functional and project structures. The options seem to be pointing to a matrix structure, so I'll go with that.
KR
Krystal
1 year ago
Okay, let's see here. The package.json file specifies a version range of ^1.3.0, which means any compatible version from 1.3.0 up to, but not including, 2.0.0. Based on the version information, I think the answer is B - 1.3.5.
TA
Tamekia
1 year ago
I'm a bit confused on this one. I'll have to review the material again and see if I can figure out the best approach. Creating a tile might be the way to go, but I'm not totally sure.
EU
Eun
1 year ago
Debugging ping packets seems less relevant; it might not help us directly with the ARP issue we're facing.
LE
Leslie
2 years ago
I agree with all of you. I think A, B, and C all make sense as correct answers.
AR
Armanda
2 years ago
Don't forget security control monitoring and impact analyses of changes. That's definitely part of Continuous Monitoring. Option B.
ME
Merilyn
2 years ago
I think configuration management and control should be included as well. So, option C.
AR
Armando
2 years ago
I guess status reporting and documentation are part of it. So, option A.
HO
Hoa
2 years ago
Yeah, I agree. But I think it requires us to think about what actually happens after the initial certification.
SI
Simona
2 years ago
I find this question about Continuous Monitoring quite challenging.