Certified Cloud Security Professional CCSP · Free Practice Question Medium
Question 11
What is the official term for the process of determining audit results that deviate from intended configurations and policies?
- A Audit deficiency
- B Gap analysis
- C Findings
- D Noncompliance
Reveal correct answer
Correct answer: B
Explanation
Correct answer:
Gap analysis is correct. A gap analysis is performed to determine if the results found from information discovery and testing match with the configuration standards and policies. Any resulting deviation from them will be considered a finding and a gap between the desired state of a system or operations and the actual verified current state.
Incorrect answers:
All other answers choices are incorrect.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
