MENU
For each requirement listed in a ROC, which types of findings must have a full narrative response?
Suggested Answer: D
Get Premium CPSA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
DO
Dominque
12 months ago
B is definitely wrong; non-compliant findings need full narratives.
RI
Ricki
12 months ago
Really? I didn't know we had to do narratives for all findings.
CL
Clorinda
1 year ago
Wait, are you sure about that? I thought it was A.
GA
Gail
1 year ago
Totally agree with D! Makes the most sense.
JU
Junita
1 year ago
I think it's D, right? All types except Not Applicable.
DE
Denise
1 year ago
I’m leaning towards the idea that all types except Not Applicable findings need a narrative, but I could be mixing it up with another topic.
KA
Kaitlyn
1 year ago
I feel like it might be just new or closed findings that require a full narrative, but I can't recall the specifics.
EL
Elouise
1 year ago
I remember practicing a question like this, and I think it was about non-compliant findings needing more detail.
EL
Ellsworth
1 year ago
I think all findings need a narrative response, but I'm not entirely sure if that includes the Not Applicable ones.
CO
Colette
1 year ago
Okay, I think I've got it. The auto-suggestion is for array objects that are useful for categorizing resource parameters, so I'm going to go with option C.
PO
Portia
1 year ago
Hmm, I'm a little unsure about this one. Book value is related to the company's assets, but I can't quite remember if it's the net tangible asset value or something else. I'll have to think this through carefully.
RE
Reiko
1 year ago
Okay, let me think this through. A TCP and UDP ping sweep would likely be scanning multiple hosts, so I'd want to look for the source ports being set to the default ping port of 7.