Loading demo links...
Showing 1–12 of 12 questions
An OSC shows encrypted laptops but no key management procedure. What is the assessor's concern for SC.L2-3.13.10?
Select an option, then click Submit answer.
Which evidence best supports the audit review practice AU.L2-3.3.5?
Select an option, then click Submit answer.
A practice requires periodic scans of organizational systems. Which family is it in?
Select an option, then click Submit answer.
What must an assessor confirm for privileged account management under AC?
Select an option, then click Submit answer.
An OSC trains users yearly but keeps no records. Which determination risk arises for AT.L2-3.2.1?
Select an option, then click Submit answer.
Which action demonstrates the incident handling capability practice?
Select an option, then click Submit answer.
Which two practices belong to the Physical Protection family? (Choose two.)
Select all that apply, then click Submit answer.
Which two are System and Information Integrity practices? (Choose two.)
Select all that apply, then click Submit answer.
Which two evidences strengthen an implementation claim? (Choose two.)
Select all that apply, then click Submit answer.
DRAG DROP
Match each practice family to an assessor's test.
Items to match: Access Control, Audit and Accountability, Incident Response, Configuration Management.
Answer is in the explanation below.
DRAG DROP
Match each evidence type to an example.
Items to match: Examine, Observe, Interview, Artifact review.
Answer is in the explanation below.
CORRECT TEXT
A practice with any assessment objective unsatisfied must be scored ______ MET.
Answer is in the explanation below.
