CCSP · Question #690
As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization. What term pertains to the process of…
The correct answer is C. Gap analysis. Gap analysis is the correct term because it specifically describes the process of comparing a desired or intended state (the "gap" between where you are and where you should be) against the current actual state - making it the precise fit for identifying deviations between…
Question
As part of the auditing process, getting a report on the deviations between intended configurations and actual policy is often crucial for an organization. What term pertains to the process of generating such a report?
Options
- ADeficiencies
- BFindings
- CGap analysis
- DErrors
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C90% (19)
Explanation
Gap analysis is the correct term because it specifically describes the process of comparing a desired or intended state (the "gap" between where you are and where you should be) against the current actual state - making it the precise fit for identifying deviations between intended configurations and actual policy.
- Deficiencies (A) refers to shortcomings or weaknesses found during an audit, but it describes the results themselves, not the process of generating the comparative report.
- Findings (B) are documented observations or conclusions from an audit - again, an output/artifact, not the analytical process of comparing intended vs. actual.
- Errors (D) implies mistakes or inaccuracies, which is too narrow and informal; it doesn't capture the structured, process-oriented nature of policy deviation reporting.
Memory tip: Think of "gap" literally - a gap analysis measures the gap between where policy says you should be and where you actually are. If you remember "policy gap = gap analysis," this question becomes straightforward on exam day.
Topics
Community Discussion
No community discussion yet for this question.