Which of the following activities is not a element of monitoring security controls? Response:

Operation and maintenance involves the day-to-day running and upkeep of systems and controls. While these activities occur alongside and enable security, they are not themselves the monitoring activities that specifically assess the effectiveness, status, and impact of the security controls through observation, testing, and analysis.

Security control monitoring and impact analyses are direct and explicit activities involved in assessing the ongoing effectiveness and potential impact of security controls.

Status reporting and documentation are essential for communicating the findings of security control monitoring and maintaining an audit trail.

Configuration management and control ensures that security configurations are maintained and changes are managed securely, which is a key part of maintaining and monitoring the security posture of controls.