Online Access Free CCSFP Exam Questions

Using only the information from the chart and question below, please answer the following question:
Domain
Control Reference
Requirement Statement
Numeric Score
01 Information Program
00.a.ISMP
The organization has...
72
01 Information Program
00.a.ISMP
The organization ensures...
74
01 Information Program
00.a.ISMP
A formal information...
81
02 Endpoint Protection
09.j Controls Against Malicious Code
Antivirus clients have...
62
02 Endpoint Protection
09.ab Monitoring System Use
Antivirus clients are...
79
05 Wireless Protection
09.ab Monitoring System Use
Networks are monitored...
84
19 Data Protection & Privacy
11.c Responsibilities and Procedures
The Privacy Officer...
42
19 Data Protection & Privacy
11.c Responsibilities and Procedures
A formal privacy program...
63
19 Data Protection & Privacy
02.d Management Responsibilities
Senior management...
68
19 Data Protection & Privacy
02.d Management Responsibilities
Requests for covered...
70
Assuming no Implementation score achieved 100% on any requirement statement and assuming all Control References are required for certification, this assessment will contain a required Corrective Action Plan (CAP)? [0193]

• A.False
• B.True

An organization uses system administrators to measure firewall configuration security. Assuming the seven Measured criteria are met, a Tier 4 strength would be an appropriate starting point to determine the Measured compliance rating.

• A.False
• B.True

Gaps with required CAPs must be remediated within six months.

• A.False
• B.True

Halfway through an r2 assessment, management asks to add six implemented systems to the scope of primary components. What would the assessor need to do within MyCSF?

• A.Request a Bridge Certificate
• B.Remove all authoritative sources added to the assessment object
• C.Revert all Requirement Statements completed by the assessor so the client can consider control impact
• D.Update the "Scope of the Assessment" tab in the assessment object

For an r2 assessment, to obtain a Validated Report with Certification, each domain must score at least a 71 or higher.

• A.False
• B.True