QuestionQ18

Risk Management and Security Frameworks

What can be determined from the NIST SP 800-53-related screenshot below?

Question Image

  • A Previous Logon (Access) Notification is required in all baselines
  • B Account Management must be implemented before Unsuccessful Logon Attempts
  • C Session Lock has the most control enhancements
  • D Account Management must be implemented before Separation of Duties
Explanation

Account Management (AC-2) has Priority P1, whereas Unsuccessful Logon Attempts (AC-7) has Priority P2. P1 denotes a higher implementation priority than P2, so Account Management is implemented first.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!