Online Access Free CCSFP Exam Questions

On an r2 assessment, when considering the CAP vs. gap decision, will CAPs be required if a Control Reference has an aggregate raw score of 72.5 across Requirement Statements with gaps?

• A.Yes
• B.No

An organization uses system administrators to measure firewall configuration security. Assuming the seven Measured criteria are met, a Tier 4 strength would be an appropriate starting point to determine the Measured compliance rating.

• A.True
• B.False

MyCSF analytics can be used to visualize data within an assessment object as well as across all assessment objects within an organization.

• A.True
• B.False

The concept of HITRUST CSF risk levels was adapted from what security standard?

• A.ISO/IEC 27002
• B.ISO/IEC 27001
• C.NIST 800-53
• D.COBIT 5

The A1 Security Assessment requirements can only be added to the r2 assessment type.

• A.True
• B.False