MENU
Which of the following characteristics are described by the DIAP Information Readiness Assessment function?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B, C
Get Premium ISSMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The characteristics of the DIAP Information Readiness Assessment function are as follows:
It provides data needed to accurately assess IA readiness.
It identifies and generates IA requirements.
It performs vulnerability/threat analysis assessment.
Answer option D is incorrect. It is a function performed by the ASSET system.
14 comments · newest first
JE
Jennie
11 months ago
Totally agree with A and C, they make the most sense.
ME
Melissa
12 months ago
Wait, does it really do threat analysis? That's surprising!
MI
Mireya
12 months ago
D seems a bit off to me.
KE
Keneth
12 months ago
I think B is also a valid choice.
FA
Fausto
1 year ago
A and C are definitely correct.
SA
Salome
1 year ago
I’m leaning towards option D being incorrect. I don’t recall DIAP focusing on data storage; it seems more about assessment and analysis.
TO
Tony
1 year ago
I remember practicing a question similar to this, and I think option B is definitely relevant since identifying IA requirements is crucial for readiness assessments.
DE
Della
1 year ago
I'm not entirely sure about option A. I feel like vulnerability assessments are part of a broader security framework, but I can't recall if DIAP specifically does that.
DO
Donette
1 year ago
I think option C sounds right because it mentions assessing IA readiness, which is a key part of the DIAP function.
MA
Marshall
1 year ago
Ah, Peer to Peer - that's the one! I remember learning about that in my networking course.
MI
Mitsue
1 year ago
The question specifically mentions the --protocol option, so I'll focus on that and try to recall the different protocol options I've seen in the documentation.
LE
Leonor
1 year ago
I'm a little confused on this one. I was thinking we'd need to review the IT performance objectives and indicators first, but now I'm second-guessing that. Maybe I'm overthinking it and the key really is to start with the enterprise goals. I'll have to make sure I understand the logic behind the correct answer.
JO
Joni
1 year ago
I remember practicing a question similar to this, and I think it was about nozzles and downcomers, but it's all a bit hazy now.
VI
Vincenza
1 year ago
I was leaning toward option C, but I remember we discussed that accepting a risk without any action might not always be the best approach, especially if there's a medium likelihood involved.