ISC2 ISSEP Exam - Topic 4 Question 86 Discussion

Actual exam question for ISC2's ISSEP exam

Question #: 86
Topic #: 4

Continuous Monitoring is the fourth phase of the security certification and accreditation process. What activities are performed in the Continuous Monitoring process Each correct answer represents a complete solution. Choose all that apply.

AStatus reporting and documentation

BSecurity control monitoring and impact analyses of changes to the information system

CConfiguration management and control

DSecurity accreditation documentation E. Security accreditation decision

Show Suggested Answer

Suggested Answer: A, B, C

by Ryan at May 09, 2024, 04:39 AM

Limited Time Offer

25%

Off

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cherelle

3 months ago

I had no idea Continuous Monitoring was so involved!

upvoted 0 times

...

Buffy

3 months ago

Totally agree with A and B, but C feels a bit off.

upvoted 0 times

...

Lauryn

3 months ago

Wait, D and E don't belong here, right?

upvoted 0 times

...

Alexis

4 months ago

I think C is also crucial for continuous monitoring.

upvoted 0 times

...

Sheridan

4 months ago

Definitely A and B are part of it!

upvoted 0 times

...

Donette

4 months ago

I feel like security accreditation documentation is important, but I’m not confident if it falls under continuous monitoring or the earlier phases.

upvoted 0 times

...

Theodora

4 months ago

Configuration management sounds familiar, but I can't recall if it's directly tied to continuous monitoring or if it's more about the initial setup.

upvoted 0 times

...

Nan

4 months ago

I think security control monitoring is a key activity in this phase, similar to what we practiced in our last mock exam.

upvoted 0 times

...

France

5 months ago

I remember that status reporting is definitely part of continuous monitoring, but I'm not entirely sure about the specifics of impact analyses.

upvoted 0 times

...

Eveline

5 months ago

Ah, I've got this! The Continuous Monitoring phase is all about maintaining the security posture of the system, so status reporting, control monitoring, and configuration management are key activities. I'll select B, C, and A to cover all the bases.

upvoted 0 times

...

Lavelle

5 months ago

Okay, let's see here. I remember from my studies that Continuous Monitoring involves ongoing assessment of the security controls and system changes. I think options B and C are definitely correct, but I'll double-check the other choices to be sure.

upvoted 0 times

...

Ozell

5 months ago

Hmm, I'm a bit unsure about this one. The question is asking about the specific activities in the Continuous Monitoring phase, so I'll need to make sure I understand the differences between the various phases to answer this correctly.

upvoted 0 times

...

Mattie

5 months ago

This looks like a straightforward question on the activities involved in the Continuous Monitoring phase of the security certification and accreditation process. I'll review the options carefully and select all the correct answers.

upvoted 0 times

...

Asuncion

5 months ago

I think this is asking about the organizational structure that combines functional and project structures. The options seem to be pointing to a matrix structure, so I'll go with that.

upvoted 0 times

...

Krystal

5 months ago

Okay, let's see here. The package.json file specifies a version range of ^1.3.0, which means any compatible version from 1.3.0 up to, but not including, 2.0.0. Based on the version information, I think the answer is B - 1.3.5.

upvoted 0 times

...

Tamekia

5 months ago

I'm a bit confused on this one. I'll have to review the material again and see if I can figure out the best approach. Creating a tile might be the way to go, but I'm not totally sure.

upvoted 0 times

...