nerdexam
(ISC)2

CGRC · Question #326

Which of the following is not an example of automation activity? Response:

The correct answer is D. Conducting table-top exercises. Conducting table-top exercises is a manual, human-driven activity focused on simulated scenarios and is therefore not an example of automation activity.

Assessment/Audit of Security and Privacy Controls

Question

Which of the following is not an example of automation activity? Response:

Options

  • AEnabling security configurations based on a checklist of security settings
  • BScanning for compliance against a pre-configured checklist of security settings
  • CScanning for vulnerabilities and applying the appropriate patches
  • DConducting table-top exercises

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    95% (35)

Why each option

Conducting table-top exercises is a manual, human-driven activity focused on simulated scenarios and is therefore not an example of automation activity.

AEnabling security configurations based on a checklist of security settings

Enabling security configurations based on a checklist can be automated using configuration management tools or scripts to apply baseline settings.

BScanning for compliance against a pre-configured checklist of security settings

Scanning for compliance against a pre-configured checklist is a classic example of automated auditing and reporting performed by compliance tools.

CScanning for vulnerabilities and applying the appropriate patches

Scanning for vulnerabilities and applying appropriate patches is a common automation task performed by vulnerability management and patch management systems.

DConducting table-top exercisesCorrect

Conducting table-top exercises involves human interaction, discussion, and decision-making in a simulated environment to test response plans, making it a manual, strategic activity rather than an automated one. Automation focuses on tasks performed by systems without direct human intervention.

Concept tested: Automation in cybersecurity

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf

Topics

#Automation#Security Controls#Compliance Assessment#Assessment Methods

Community Discussion

No community discussion yet for this question.

Full CGRC Practice