Câu 13: CCP: Certified CMMC Professional
In late September, CA.L2-3.12.1: Periodically assess the security controls in organizational systems to determine if the controls are effective in their application is assessed. Procedure specifies that a security control assessment shall be conducted quarterly. The Lead Assessor is only provided the first quarter ass…
Nội dung câu hỏi
In late September, CA.L2-3.12.1: Periodically assess the security controls in organizational systems to determine if the controls are effective in their application is assessed. Procedure specifies that a security control assessment shall be conducted quarterly. The Lead Assessor is only provided the first quarter assessment report because the person conducting the second quarter’s assessment is currently out of the office and will return to the office in two hours. Based on this information, the Lead Assessor should determine that the evidence is:
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. sufficient, and rate the audit finding as MET.
- B. insufficient, and rate the audit finding as NOT MET. — đáp án hiện tại
- C. sufficient, and re-rate the audit finding after a quarter two assessment report is examined.
- D. insufficient, and re-rate the audit finding after a quarter two assessment report is examined.
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.