MENU
For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)
Suggested Answer: A
Get Premium CIS-RCI Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
43 comments · newest first
RY
Ryan
12 months ago
I’m not sure about using indicator results for control identification.
SO
Soledad
12 months ago
Totally agree with A and B!
MI
Mitsue
1 year ago
Wait, can you really identify controls ad-hoc? Seems risky.
ME
Mendy
1 year ago
I think E makes sense too.
KR
Krystina
1 year ago
A and C are solid options!
LI
Lizbeth
1 year ago
I’m a bit confused about whether ad-hoc identification counts separately from library identification. Can they be chosen together?
VE
Verlene
1 year ago
I feel like we practiced a question similar to this, and I think identifying controls from indicator results was mentioned as a valid option.
IV
Ivan
1 year ago
I think controls can definitely be identified from related issues, but I can't recall if that's one of the three choices.
LE
Lenna
1 year ago
I remember we discussed how controls can be identified from both libraries and ad-hoc methods, but I'm not sure if both are options here.
TE
Tess
1 year ago
I'm pretty confident about this one. CIFS is a Windows file sharing protocol, so I'll select option D.
TA
Tambra
1 year ago
This is a good example of the types of agency issues we've been covering. I'll methodically work through the facts and legal principles to arrive at the right conclusion.
DE
Desmond
1 year ago
Hmm, the question is a bit confusing. I'm not sure exactly what they're looking for in terms of "hackers" and "interfering" devices.
RI
Rima
1 year ago
This seems like a straightforward security question. I'll carefully read through the options and think about the safest approach.
AD
Adela
1 year ago
Alright, let's think this through. A, C, and D cover the bases for control identification. Can't go wrong with that, right? Except maybe the library is dusty and the ad-hoc controls are held together with duct tape.
AN
Annamaria
1 year ago
D) Controls are identified ad-hoc
MI
Minna
1 year ago
C) Controls are identified from library
DO
Donte
1 year ago
A) Controls are identified from library and ad-hoc
BR
Brock
1 year ago
Haha, this reminds me of that time my boss asked me to identify controls from his crystal ball. Joke's on him, I don't even have one!
OL
Olive
1 year ago
E) Controls are identified from related issues
JU
Juan
1 year ago
B) Controls are identified from indicator results
NO
Nobuko
1 year ago
A) Controls are identified from library and ad-hoc
AP
Apolonia
2 years ago
Wait, why can't I choose B and E? Shouldn't we also consider controls from indicator results and related issues? This question is tricky.
CH
Chana
1 year ago
B) Controls are identified from indicator results
CA
Cassie
1 year ago
D) Controls are identified ad-hoc
ST
Stephania
1 year ago
C) Controls are identified from library
ST
Steffanie
1 year ago
A) Controls are identified from library and ad-hoc
AN
Antonio
1 year ago
You're right, the question specifically asked for options for control identification. That's why B and E are not included.
GE
Genevieve
1 year ago
D) Controls are identified ad-hoc
AS
Asuncion
1 year ago
C) Controls are identified from library
DO
Dolores
1 year ago
D) Controls are identified ad-hoc
GR
Grover
1 year ago
C) Controls are identified from library
GE
Georgene
1 year ago
A) Controls are identified from library and ad-hoc
RO
Robt
1 year ago
A) Controls are identified from library and ad-hoc
JA
Jackie
2 years ago
I believe controls can also be identified from related issues, so option E should be considered as well.
AR
Arlette
2 years ago
I think the correct options are A, C, and D. Identifying controls from a library and ad-hoc makes sense for a risk assessment methodology.
AL
Alisha
1 year ago
It's important to have a mix of control identification methods to ensure a comprehensive risk assessment.
VE
Veronika
1 year ago
I prefer controls identified from indicator results, they provide more specific information.
MA
Magdalene
1 year ago
I think controls identified from related issues can also be helpful in the process.
FL
Fletcher
1 year ago
I think controls identified from related issues could also be useful in certain situations.
MA
Magdalene
1 year ago
I agree, controls from a library and ad-hoc are important for a risk assessment methodology.
EL
Elke
2 years ago
I agree, controls from a library and ad-hoc are important for a risk assessment methodology.
CU
Curtis
2 years ago
I agree with Latia, controls can be identified from library, ad-hoc, and indicator results.
LA
Latia
2 years ago
I think options A, C, and D are possible for control identification.