Security Assessment and Testing
Question #111
You are preparing a report for the board regarding a recent vulnerability assessment. What is the most professional way to structure this information?
A. A recap of existing security policies followed by results of personnel and physical vulnerability tests.
B. A recap of security frameworks used followed by a breakdown of system and network vulnerabilities.
C. A disclaimer that the assessment is a 'snapshot in time,' followed by results on personnel, physical, and network vulnerabilities.
D. A list of all countermeasures currently in use compared to the found vulnerabilities.
Domain Concept: Security Assessment and Testing
This scenario evaluates management-level decision making in Security Assessment and Testing. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.