Study. uk . com
  1. Home
  2. All questions
  3. Question 243

CISM study material · question 243 of 1000

A supplier's hardware is verified for authenticity and integrity only after it has been racked and connected. Which CSF 2.0 outcome does this fail?

  1. Hardware and software are checked for authenticity and integrity before they are bought and put to use
  2. Configuration management practices are established and applied to every device once it has been racked and connected
  3. Inventories of supplier-provided services are maintained
  4. Critical suppliers are assessed prior to acquisition
Show the answer

Answer: A. Hardware and software are checked for authenticity and integrity before they are bought and put to use

CSF 2.0's ID.RA-09 puts that verification ahead of acquisition and use. Checking a device once it is racked and connected is too late to meet the outcome.

Source: NIST CSWP 29 (NIST) — Appendix A ID.RA-09

Challenge yourself on this topic → Study as cards