Start learning →

Spot the false claim

Exercise and reference answers

Questions
  1. False statement
    Tier 2 covers one system only
    Statements
    1. Tier 1 is the organisation
    2. Tier 3 is information systems
    3. Tier 2 covers one system only
  2. False statement
    Monitoring replaces risk management
    Statements
    1. Monitoring supports risk decisions
    2. Monitoring replaces risk management
    3. Monitoring is a tactic within it
  3. False statement
    Metrics never need revisiting
    Statements
    1. Metrics are framed per tier
    2. Metrics never need revisiting
    3. Metrics evolve with lessons learned
Instructions
Two claims are true and one is false. Tap the false one.

Explanation

_Source: NIST SP 800-137, 'Information Security Continuous Monitoring for Federal Information Systems and Organizations'_
Continue learning with Quill →

Browse more BCA Cloud Computing questions and exercises →