ISC2 Exam CCSP Topic 8 Question 89 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 89
Topic #: 8

[All CCSP Questions]

Which of the following frameworks focuses specifically on design implementation and management?

AISO 31000:2009

BISO 27017

CNIST 800-92

DHIPAA

Show Suggested Answer

Suggested Answer: A

ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.

by Portia at May 21, 2024, 02:19 AM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nobuko

6 months ago

This question is a piece of cake! ISO 27017 is the answer, no doubt. Though I do wonder if the exam writer has a sense of humor. HIPAA, really?

upvoted 0 times

...

Leonida

6 months ago

I heard ISO 27017 is the new cool kid on the block. Gotta go with that one, Leonidan if I'm not 100% sure.

upvoted 0 times

...

Tarra

6 months ago

Come on, guys, it's obviously not HIPAA. That's for healthcare data, not design frameworks. I'm going with B) ISO 27017.

upvoted 0 times

...

Lashon

6 months ago

Hmm, I'm not sure. HIPAA seems a bit too specific for this question. Maybe it's ISO 31000:2009 since it's a general risk management standard?

upvoted 0 times

...

Wilford

6 months ago

NIST 800-92 sounds like it could be the right answer. Isn't that the framework for computer security log management?

upvoted 0 times

Domingo

5 months ago

NIST 800-92 is definitely the framework that focuses on design implementation and management.

upvoted 0 times

...

Tina

5 months ago

Yes, NIST 800-92 is the correct answer for design implementation and management.

upvoted 0 times

...

Skye

5 months ago

I think you're right, NIST 800-92 does focus on computer security log management.

upvoted 0 times

...

Donte

6 months ago

I think the answer is B) ISO 27017. It's all about cloud security controls, which is definitely focused on design and management.

upvoted 0 times

Maryann

5 months ago

Yes, ISO 27017 is the correct answer for design implementation and management.

upvoted 0 times

...

Luis

6 months ago

I think you're right, it does focus on design and management.

upvoted 0 times

...

Edward

6 months ago

I agree, ISO 27017 is all about cloud security controls.

upvoted 0 times

...