nerdexam
(ISC)2

CSSLP · Question #210

Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. It performs vulnerability/threat analysis assessment. C. It provides data needed to accurately assess IA readiness. D. It identifies and generates IA requirements.. The DIAP Information Readiness Assessment function is responsible for performing vulnerability/threat analysis, providing data to accurately assess Information Assurance (IA) readiness, and identifying and generating IA requirements.

Secure Software Deployment, Operations, Maintenance

Question

Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt provides for entry and storage of individual system data.
  • BIt performs vulnerability/threat analysis assessment.
  • CIt provides data needed to accurately assess IA readiness.
  • DIt identifies and generates IA requirements.

How the community answered

(29 responses)
  • A
    14% (4)
  • B
    86% (25)

Why each option

The DIAP Information Readiness Assessment function is responsible for performing vulnerability/threat analysis, providing data to accurately assess Information Assurance (IA) readiness, and identifying and generating IA requirements.

AIt provides for entry and storage of individual system data.

While data is involved, providing for entry and storage of individual system data is a broader function of system management or inventory, not the specific characteristic described by the readiness assessment function itself. The assessment uses this data but doesn't define the entry/storage mechanism.

BIt performs vulnerability/threat analysis assessment.Correct

A key characteristic of an Information Readiness Assessment is to perform vulnerability and threat analysis to identify potential weaknesses and risks to the system.

CIt provides data needed to accurately assess IA readiness.Correct

The function is designed to collect and provide the necessary data and metrics to accurately determine the Information Assurance (IA) readiness of a system or organization.

DIt identifies and generates IA requirements.Correct

Part of assessing readiness involves identifying and articulating the specific Information Assurance (IA) requirements that must be met for a system or environment.

Concept tested: DIAP Information Readiness Assessment characteristics

Topics

#Information Readiness Assessment#Vulnerability Analysis#Information Assurance#Security Requirements

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice