nerdexam
CompTIA

SY0-701 · Question #253

The application development teams have been asked to answer the following questions: - Does this application receive patches from an external source? - Does this application contain open-source…

The correct answer is A. Risk control self-assessment. The questions listed are part of a Risk Control Self-Assessment (RCSA), which is a process where teams evaluate the risks associated with their operations and assess the effectiveness of existing controls. The questions focus on aspects such as patch management, the use of…

Submitted by rania.sa· Mar 6, 2026Security program management and oversight

Question

The application development teams have been asked to answer the following questions:

  • Does this application receive patches from an external source?
  • Does this application contain open-source code?
  • is this application accessible by external users?
  • Does this application meet the corporate password standard?

Which of the following are these questions port of?

Options

  • ARisk control self-assessment
  • BRisk management strategy
  • CRisk acceptance
  • DRisk matrix

How the community answered

(24 responses)
  • A
    88% (21)
  • C
    4% (1)
  • D
    8% (2)

Explanation

The questions listed are part of a Risk Control Self-Assessment (RCSA), which is a process where teams evaluate the risks associated with their operations and assess the effectiveness of existing controls. The questions focus on aspects such as patch management, the use of open- source code, external access, and compliance with corporate standards, all of which are critical for identifying and mitigating risks.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice