Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

ISC2 Exam CCSP Topic 10 Question 95 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 95
Topic #: 10

[All CCSP Questions]

Which of the following frameworks focuses specifically on design implementation and management?

AISO 31000:2009

BISO 27017

CNIST 800-92

DHIPAA

Show Suggested Answer

Suggested Answer: A

ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.

by Brande at Aug 06, 2024, 08:02 PM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arlene

3 months ago

I agree with Darrin, ISO 27017 is the correct answer for this question.

upvoted 0 times

...

Kanisha

3 months ago

I disagree, I believe it's C) NIST 800-92.

upvoted 0 times

...

Darrin

3 months ago

But ISO 27017 specifically focuses on cloud services security, which includes design implementation and management.

upvoted 0 times

...

Darrin

3 months ago

I think the answer is B) ISO 27017.

upvoted 0 times

...

Elmer

3 months ago

I believe D) HIPAA is more about healthcare data privacy, so it's not the right choice for this question.

upvoted 0 times

...

Hyun

3 months ago

Haha, good one! I bet none of these are the right answer. Probably some obscure framework that no one's heard of. IT people love to do that, don't they?

upvoted 0 times

Detra

3 months ago

C) NIST 800-92

upvoted 0 times

...

Eve

3 months ago

A) ISO 31000:2009

upvoted 0 times

...

...

Cammy

3 months ago

I'm going with D) HIPAA. That's all about healthcare data protection, so it's gotta be about implementation and management, right?

upvoted 0 times

Noe

3 months ago

I'm going with D) HIPAA. That's all about healthcare data protection, so it's gotta be about implementation and management, right?

upvoted 0 times

...

Melissia

3 months ago

Yeah, I agree. B) ISO 27017 seems to focus on cloud security.

upvoted 0 times

...

Marion

3 months ago

I think A) ISO 31000:2009 is more about risk management.

upvoted 0 times

...

...

Mitsue

4 months ago

I'm not sure, but I think C) NIST 800-92 also covers design implementation.

upvoted 0 times

...

Emiko

4 months ago

Hmm, I was thinking it was C) NIST 800-92. Isn't that the one about computer security log management? Seems relevant for design and management.

upvoted 0 times

Thea

2 months ago

D) HIPAA is related to healthcare data protection.

upvoted 0 times

...

Muriel

3 months ago

C) NIST 800-92 is indeed about computer security log management.

upvoted 0 times

...

Hermila

3 months ago

B) ISO 27017 is specific to cloud security.

upvoted 0 times

...

Shanda

3 months ago

A) ISO 31000:2009 focuses on risk management.

upvoted 0 times

...

...

Brynn

4 months ago

I agree with Judy, ISO 27017 focuses on design implementation and management.

upvoted 0 times

...

Judy

4 months ago

I think the answer is B) ISO 27017.

upvoted 0 times

...

Willard

4 months ago

I'm pretty sure the correct answer is B) ISO 27017. That's the one that focuses on cloud security controls, right?

upvoted 0 times

Hector

3 months ago

That's right, ISO 27017 is the framework that specifically focuses on design implementation and management.

upvoted 0 times

...

Ora

4 months ago

Yes, you're correct! ISO 27017 does focus on cloud security controls.

upvoted 0 times

...

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77