nerdexam
(ISC)2

CGRC · Question #516

What task in Assess Security Controls where you conduct initial remediation actions on security controls based on findings and recommendations of the security assessment report and reassess re-mediate

The correct answer is A. Remediation Actions, Task 4. The task of conducting initial remediation actions and reassessing remediated controls based on security assessment findings is known as 'Remediation Actions' and is designated as Task 4 within the 'Assess Security Controls' step of the RMF.

Assessment/Audit of Security and Privacy Controls

Question

What task in Assess Security Controls where you conduct initial remediation actions on security controls based on findings and recommendations of the security assessment report and reassess re-mediated control(s), as appropriate. Response:

Options

  • ARemediation Actions, Task 4
  • BRemediation Actions, Task 2
  • CRemediation Actions, Task 3
  • DRemediation Actions, Task 1

How the community answered

(31 responses)
  • A
    94% (29)
  • B
    3% (1)
  • D
    3% (1)

Why each option

The task of conducting initial remediation actions and reassessing remediated controls based on security assessment findings is known as 'Remediation Actions' and is designated as Task 4 within the 'Assess Security Controls' step of the RMF.

ARemediation Actions, Task 4Correct

Within the 'Assess' step of the NIST Risk Management Framework, Task 4, 'Remediation Actions,' specifically involves initiating immediate remediation for identified security weaknesses and subsequently reassessing those remediated controls to confirm their effectiveness. This is a crucial step before moving to the 'Authorize' phase.

BRemediation Actions, Task 2

There is no 'Remediation Actions, Task 2' directly corresponding to this activity in the NIST RMF Assess step.

CRemediation Actions, Task 3

There is no 'Remediation Actions, Task 3' directly corresponding to this activity in the NIST RMF Assess step.

DRemediation Actions, Task 1

There is no 'Remediation Actions, Task 1' directly corresponding to this activity in the NIST RMF Assess step.

Concept tested: NIST RMF - Assess Step Tasks (Remediation Actions)

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf

Topics

#Security Control Assessment#Remediation#NIST RMF#Control Reassessment

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice