Certified Information Systems Security Professional CISSP · Free Practice Question Easy
Question 109
- A Executive summary
- B Background
- C Methodology
- D Recommendations
Reveal correct answer
Correct answer: A
Explanation
Correct Answer:
A is correct. The executive summary is intended for readers who may not be able to devote more than a few minutes to the report. It contains a hard-hitting summary of key take-aways.
Incorrect Answers:
B is incorrect. The background section of the report goes into a bit more depth as to why the assessment or audit was conducted in the first place. It also describes the scope of the event, references to policies, industry standards, regulations, and statutes.
C is incorrect. The methodology describes the process by which the assessment or audit was conducted. This is also a good section in which to list the personnel who participated, dates, times, locations, and any parts of the system that were excluded from the assessment, as well as the reasons why.
D is incorrect. The recommendations section mirrors the organization of the findings from the analysis and is the actionable part of the report. It presents recommended actions senior management should take to mitigate some of the issues contained in the findings.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
