ISC2 Exam CCSP Topic 10 Question 85 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 85
Topic #: 10

[All CCSP Questions]

Which of the following is not a risk management framework?

ACOBIT

BHex GBL

CISO 31000:2009

DNIST SP 800-37

Show Suggested Answer

Suggested Answer: B

Hex GBL is a reference to a computer part in Terry Pratchett's fictional Discworld universe. The rest are not.

by Sheron at Apr 13, 2024, 07:58 PM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Johnetta

6 months ago

Eve, I think you are correct. COBIT is not a risk management framework.

upvoted 0 times

...

Tammy

6 months ago

I would go with A) COBIT as the answer.

upvoted 0 times

...

Reed

6 months ago

I disagree with NIST SP 800-37 is actually a risk management framework.

upvoted 0 times

...

Rosamond

6 months ago

I believe the answer is D) NIST SP 800-37.

upvoted 0 times

...

Mammie

6 months ago

I agree with Hex GBL is not a risk management framework.

upvoted 0 times

...

Lang

6 months ago

I think the answer is B) Hex GBL.

upvoted 0 times

...

Candida

6 months ago

Actually, NIST SP 800-37 is a risk management framework. So, the correct answer is Hex GBL.

upvoted 0 times

...

Rasheeda

7 months ago

I'm not so sure, but I think D) NIST SP 800-37 is not a risk management framework.

upvoted 0 times

...

Marvel

7 months ago

I agree with Armanda, Hex GBL does not sound like a risk management framework.

upvoted 0 times

...

Armanda

7 months ago

I think B) Hex GBL is not a risk management framework.

upvoted 0 times

...

Haha, good one Gabriele. These exam questions can really 'hex' you up sometimes. But I think we're on the right track here. Hex GBL has got to be the answer that's not a real risk management framework.

upvoted 0 times

...

Gabriele

8 months ago

Okay, so we're all in agreement that Hex GBL is the odd one out here. *chuckles* Imagine if the person who wrote this question was just trying to see if we'd fall for some made-up framework. That would be a real 'hex' on our test-taking skills, wouldn't it?

upvoted 0 times

...

Angella

8 months ago

Yeah, Hex GBL is totally sus. I'm with you guys on that one. COBIT and ISO 31000 are legit, and NIST SP 800-37 is a standard I'm familiar with from my work in the public sector.

upvoted 0 times

...

Shawn

8 months ago

I agree with Enola. Hex GBL sounds like something someone just threw together to confuse us. I'm gonna go with that as the answer that's not a real risk management framework.

upvoted 0 times

...

Enola

8 months ago

Hex GBL? What kind of made-up framework is that? I'm pretty sure it's not a real thing. NIST SP 800-37 on the other hand, that's a well-known framework for risk management in government and the public sector.

upvoted 0 times

Amie

7 months ago

COBIT, ISO 31000:2009, and NIST SP 800-37 are all known frameworks, but Hex GBL does sound unfamiliar.

upvoted 0 times

...

Loren

7 months ago

NIST SP 800-37 is definitely a recognized framework. It's widely used in government and public sector.

upvoted 0 times

...

Diane

7 months ago

I agree, Hex GBL does sound made-up. It doesn't seem familiar to me.

upvoted 0 times

...

Kyoko

8 months ago

Hmm, this is a tricky one. I feel like COBIT and ISO 31000:2009 are definitely risk management frameworks, but I'm not familiar with Hex GBL. What do you all think?

upvoted 0 times

...

ISC2 Exam CCSP Topic 10 Question 85 Discussion

Contribute your Thoughts:

Johnetta

Tammy

Reed

Rosamond

Mammie

Lang

Candida

Rasheeda

Marvel

Armanda

Lauran

Gabriele

Angella

Shawn

Enola

Amie

Loren

Diane

Kyoko