ISC2 Exam CISSP Topic 2 Question 85 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 85
Topic #: 2

[All CISSP Questions]

What is the PRIMARY objective for conducting an internal security audit?

AVerify that all systems and Standard Operating Procedures (SOP) are properly documented.

BVerify that all personnel supporting a system are knowledgeable of their responsibilities.

CVerify that security controls are established following best practices.

DVerify that applicable security controls are implemented and effective.

Show Suggested Answer

Suggested Answer: C

by Vincent at Apr 12, 2024, 12:30 AM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sueann

Hmm, I'm torn between C and D here. I mean, both of those seem important, but D just feels more like the true objective to me. Gotta make sure those controls are effective, you know?

upvoted 0 times

...

Timothy

13 days ago

Wow, this is a tricky one! I'm pretty sure the answer is D, though. Verifying that security controls are actually working seems like the primary goal of an internal audit, right?

upvoted 0 times

...