Which two asset types does the Community Profile include in continuous monitoring for incident response that a purely network-focused programme would omit? Choose two.

Question

Answer 1

Show the answer

Answer: C. The physical environment
B. External service provider activities

SP 800-61r3's monitoring scope runs past networks and services to computing hardware, software and runtime environments with their data, the physical environment, what personnel do with technology, and external providers.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 DE.CM.R1