A Certified Information Systems Security Professional (CISSP) with identity and access management (IAM) responsibilities is asked by the Chief Information Security Officer (CISO) to4 perform a vulnerability assessment on a web application to pass a Payment Card Industry (PCI) audit. The CISSP has never performed this before. According to the (ISC)? Code of Professional Ethics, which of the following should the CISSP do?

Question

Renata Maria DA SILVA · Accepted Answer

Inform the CISO that they are unable to perform the task because they should render only those services for which they are fully competent and qualified

Renata Maria DA SILVA · Answer

Review the CISSP guidelines for performing a vulnerability assessment before proceeding to complete it

Renata Maria DA SILVA · Answer

Review the PCI requirements before performing the vulnerability assessment

Renata Maria DA SILVA · Answer

Since they are CISSP certified, they have enough knowledge to assist with the request, but will need assistance in order to complete it in a timely manner

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1080 - CISSP discussion

Suggested answer: C

0 comments