Study. uk . com
  1. Home
  2. All questions
  3. Question 105

CompTIA Security+ study material · question 105 of 611

A system cannot meet a mandated control. Which response keeps this within governance rather than making it an audit finding?

  1. Lowering the system's impact categorisation
  2. A documented, time-limited, approved exception
  3. An informal agreement with the system owner
  4. Removing the control from the policy
Show the answer

Answer: B. A documented, time-limited, approved exception

A recorded and approved exception is governance; an undocumented deviation is a finding.

Challenge yourself on this topic → Study as cards