nerdexam
(ISC)2

CSSLP · Question #20

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among th

The correct answer is A. VI Vulnerability and Incident Management C. DC Security Design & Configuration D. EC Enclave and Computing Environment. DoD Instruction 8500.2 defines eight Information Assurance (IA) areas, including Vulnerability and Incident Management (VI), Security Design & Configuration (DC), and Enclave and Computing Environment (EC).

Secure Software Lifecycle Management

Question

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AVI Vulnerability and Incident Management
  • BInformation systems acquisition, development, and maintenance
  • CDC Security Design & Configuration
  • DEC Enclave and Computing Environment

How the community answered

(44 responses)
  • A
    93% (41)
  • B
    7% (3)

Why each option

DoD Instruction 8500.2 defines eight Information Assurance (IA) areas, including Vulnerability and Incident Management (VI), Security Design & Configuration (DC), and Enclave and Computing Environment (EC).

AVI Vulnerability and Incident ManagementCorrect

VI (Vulnerability and Incident Management) is one of the eight Information Assurance areas defined by DoD Instruction 8500.2, focusing on proactively identifying vulnerabilities and reactively managing security incidents.

BInformation systems acquisition, development, and maintenance

Information systems acquisition, development, and maintenance is a broader lifecycle activity, not one of the specific eight IA areas as classified by the DoD 8500.2 instruction. While related to security, it does not represent one of the distinct categorized areas of IA controls.

CDC Security Design & ConfigurationCorrect

DC (Security Design & Configuration) is another of the eight Information Assurance areas, covering the secure architectural design and proper configuration of information systems.

DEC Enclave and Computing EnvironmentCorrect

EC (Enclave and Computing Environment) is one of the eight Information Assurance areas, addressing the security of the overall computing environment and its boundaries.

Concept tested: DoD Information Assurance (IA) areas

Topics

#DoD 8500.2#Information Assurance#IA Controls#Government Regulations

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice