nerdexam
(ISC)2

CSSLP · Question #130

Which of the following activities are performed by the 'Do' cycle component of PDCA (plan-do- check-act)? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. It detects and responds to incidents properly. C. It manages resources that are required to achieve a goal. D. It performs security awareness training. E. It operates the selected controls. The 'Do' phase of the PDCA cycle involves implementing the planned activities and controls, including incident detection and response, resource management, security awareness training, and operating the chosen controls.

Secure Software Lifecycle Management

Question

Which of the following activities are performed by the 'Do' cycle component of PDCA (plan-do- check-act)? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt detects and responds to incidents properly.
  • BIt determines controls and their objectives.
  • CIt manages resources that are required to achieve a goal.
  • DIt performs security awareness training.
  • EIt operates the selected controls.

How the community answered

(42 responses)
  • A
    88% (37)
  • B
    12% (5)

Why each option

The 'Do' phase of the PDCA cycle involves implementing the planned activities and controls, including incident detection and response, resource management, security awareness training, and operating the chosen controls.

AIt detects and responds to incidents properly.Correct

Detecting and responding to incidents is an operational activity that happens during the 'Do' phase, as it is the execution of planned incident management procedures.

BIt determines controls and their objectives.

Determining controls and their objectives is part of the 'Plan' phase, where goals are set and strategies are formulated, rather than the 'Do' (implementation) phase.

CIt manages resources that are required to achieve a goal.Correct

Managing resources (people, tools, budget) to achieve goals is a core implementation activity within the 'Do' phase.

DIt performs security awareness training.Correct

Performing security awareness training is an active implementation step, educating users and staff, which falls under the 'Do' phase.

EIt operates the selected controls.Correct

Operating the selected controls, meaning putting them into practice and running them daily, is the primary activity of the 'Do' phase.

Concept tested: PDCA cycle 'Do' phase activities

Topics

#PDCA Cycle#Security Operations#Process Management#Lifecycle Management

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice