Study. uk . com
  1. Home
  2. All questions
  3. Question 452

CISM study material · question 452 of 1000

Which two capabilities does SP 800-137 say to look for when selecting continuous monitoring tools? Choose two.

  1. Reporting that allows drilling down from aggregate metrics to system-level metrics
  2. Interoperability with help desk, inventory, configuration management and incident response solutions
  3. Exclusive use of a proprietary data format
  4. Automatic remediation carried out on the affected host without any human approval being sought first by the tool
Show the answer

Answer: B. Interoperability with help desk, inventory, configuration management and incident response solutions
A. Reporting that allows drilling down from aggregate metrics to system-level metrics

SP 800-137 looks for tools drawing on varied sources, using open specifications, fitting alongside help desk, inventory, configuration management and incident response systems, and reporting from aggregate down to individual systems.

Source: NIST SP 800-137 (NIST) — Sec. 2.3 Role of Automation

Challenge yourself on this topic → Study as cards