nerdexam
(ISC)2

CGRC · Question #195

NIST 800-53 identifies continuous monitoring as which of the following security control? Response:

The correct answer is A. CA-7. This question asks for the specific NIST 800-53 security control identifier for continuous monitoring.

Selection and Approval of Framework, Security, and Privacy Controls

Question

NIST 800-53 identifies continuous monitoring as which of the following security control? Response:

Options

  • ACA-7
  • BCA-2
  • CSA-12
  • DRA-3

How the community answered

(30 responses)
  • A
    93% (28)
  • B
    3% (1)
  • D
    3% (1)

Why each option

This question asks for the specific NIST 800-53 security control identifier for continuous monitoring.

ACA-7Correct

According to NIST SP 800-53 Rev. 5, CA-7 is the security control identified as "Continuous Monitoring." This control defines the requirements and activities for continuously monitoring the security controls of an information system and its environment of operation.

BCA-2

CA-2 is "Control Assessments."

CSA-12

SA-12 is "Supply Chain Protection."

DRA-3

RA-3 is "Risk Assessment."

Concept tested: NIST 800-53 security control identifiers

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#NIST 800-53#Continuous Monitoring#Security Controls#Control Identification

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice