Questão 5 — CompTIA SY0-701 CompTIA Security+ Certification Exam
A Chief Information Security Officer would like to conduct frequent, detailed reviews of systems and procedures to track compliance objectives. Which of the following is the best method to achieve this objective?
- A. Third-party attestation
- B. Penetration testing
- C. Internal auditing
- D. Vulnerability scans
Resposta correta:
C
Explicação
Explanation: Correct answer: C. Internal auditing An internal audit is the best method for frequent, detailed compliance reviews because: Comprehensive Assessment:Internal audits provide detailed examination of systems, procedures, and G controls to verify compliance with established objectives Frequency:Audits can be conducted regularly and on a scheduled basis to maintain ongoing compliance G monitoring Detailed Review:Unlike spot checks, audits involve thorough documentation and analysis of procedures G and their effectiveness Compliance Tracking:Audits specifically track progress against compliance objectives and identify gaps or G deficiencies Documentation:Results are formally documented, providing evidence of compliance efforts for regulatory G purposes Internal audits are the standard method used by CISOs to ensure continuous compliance with security and organizational standards.
Quer todas as 907 questões por R$ 1,00?