ISC2 ISSMP Exam - Topic 5 Question 13 Discussion

Actual exam question for ISC2's ISSMP exam

Question #: 13
Topic #: 5

Which of the following measurements of an enterprise's security state is the process whereby an organization establishes the parameters within which programs, investments, and acquisitions reach the desired results?

AInformation sharing

BEthics

CPerformance measurement

DRisk management

Show Suggested Answer

Suggested Answer: C

Performance measurement is the process whereby an organization establishes the parameters within which programs, investments, and acquisitions reach the desired results. This process of measuring performance often requires the use of statistical evidence to determine progress toward specific defined organizational objectives. Fundamental purpose behind measures is to improve performance. This is conducted with the same rigor as for other enterprise business units, functions, and processes.

Answer option D is incorrect. Risk management is the identification, assessment, and prioritization of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability or impact of unfortunate events or to maximize the realization of opportunities.

Answer option B is incorrect. Ethics are the rules of personal behavior.

Answer option A is incorrect. Information sharing includes ensuring that the right information is collected, retained, and communicated to the right parties at the right time.

by Devora at May 06, 2022, 03:51 AM

Limited Time Offer

25%

Off

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Julianna

4 months ago

I agree with Lauran, performance measurement is key!

upvoted 0 times

...

Galen

4 months ago

Wait, is this really about performance? Sounds off to me.

upvoted 0 times

...

Felicitas

4 months ago

C makes the most sense, it’s all about measuring outcomes.

upvoted 0 times

...

Cortney

4 months ago

Not so sure about that, I lean towards D, risk management.

upvoted 0 times

...

Lauran

5 months ago

I think it's definitely C, performance measurement.

upvoted 0 times

...

Glenna

5 months ago

I want to say it's performance measurement, but I keep second-guessing myself.

upvoted 0 times

...

Lashawn

5 months ago

I remember a practice question that discussed risk management in a similar context, but this feels a bit different.

upvoted 0 times

...

Shalon

5 months ago

I think this might be related to performance measurement, but I'm not entirely sure if that's the right term for it.

upvoted 0 times

...

Floyd

5 months ago

Ethics doesn't seem to fit here, and I'm leaning towards performance measurement too, but I wish I had reviewed more examples.

upvoted 0 times

...

Lisbeth

5 months ago

Option B seems like the most straightforward approach to me. Using the IP Insights algorithm and scheduling regular model updates sounds like a good way to handle this security use case. I'd focus on optimizing the model performance and deployment.

upvoted 0 times

...

Veda

5 months ago

Ah, I see what they're getting at. The fact that you have to pay first suggests that the statement "Alibaba Cloud provides powerful security services (the same level of security services used to support Alibaba Group double 11 shopping festival) for free" is false. I'm going with B. FALSE.

upvoted 0 times

...

Larae

5 months ago

I can't help but wonder if it could be a permissions issue. If the users don't have permission to view that field, it would make sense they can't see it.

upvoted 0 times

...

Luisa

5 months ago

Okay, I think I've got this. The key is to match up the components in the blueprint with the corresponding settings in the configuration. Time to put on my problem-solving hat!

upvoted 0 times

...

Blossom

5 months ago

I'm a bit unsure, but I seem to remember discussing the importance of having an accurate reference surface as well.

upvoted 0 times

...

Leonor

5 months ago

I remember learning about this in class. I think the answer is C - highest-priority value. That's the main factor used to determine the primary key server during the election process.

upvoted 0 times

...