CGRC · Question #326
Which of the following is not an example of automation activity? Response:
The correct answer is D. Conducting table-top exercises. Conducting table-top exercises is a manual, human-driven activity focused on simulated scenarios and is therefore not an example of automation activity.
Question
Which of the following is not an example of automation activity? Response:
Options
- AEnabling security configurations based on a checklist of security settings
- BScanning for compliance against a pre-configured checklist of security settings
- CScanning for vulnerabilities and applying the appropriate patches
- DConducting table-top exercises
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- D95% (35)
Why each option
Conducting table-top exercises is a manual, human-driven activity focused on simulated scenarios and is therefore not an example of automation activity.
Enabling security configurations based on a checklist can be automated using configuration management tools or scripts to apply baseline settings.
Scanning for compliance against a pre-configured checklist is a classic example of automated auditing and reporting performed by compliance tools.
Scanning for vulnerabilities and applying appropriate patches is a common automation task performed by vulnerability management and patch management systems.
Conducting table-top exercises involves human interaction, discussion, and decision-making in a simulated environment to test response plans, making it a manual, strategic activity rather than an automated one. Automation focuses on tasks performed by systems without direct human intervention.
Concept tested: Automation in cybersecurity
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Topics
Community Discussion
No community discussion yet for this question.