A government agency is designing a system to handle sensitive citizen data. The system must support forensic investigations in case of a security incident. Which design feature is essential for forensic readiness?

Use a single administrative account for all system access to simplify management.

Encrypt all data at rest, but do not log access events.

Implement tamper-evident logging that preserves the integrity of audit logs.

Store logs for a maximum of 30 days to reduce storage costs.

What is the primary purpose of vulnerability management reporting?

To inform risk decisions and guide remediation efforts

To satisfy regulatory requirements for vulnerability scanning

To replace the need for penetration testing

To provide a detailed list of all vulnerabilities for the IT department

Information Systems Security Architecture Professional

Domain 1Objective 2

1.2 Architecting for Governance, Risk, and Compliance (GRC) ISSAP Practice Questions (Page 8)

Part of the Governance, Risk, and Compliance (GRC) domain, which accounts for 21% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 8–13 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

12concepts

21%of the exam

Questions 36–37

36application · medium
A government agency is designing a system to handle sensitive citizen data. The system must support forensic investigations in case of a security incident. Which design feature is essential for forensic readiness?
Select an answer first
37foundation · easy
What is the primary purpose of vulnerability management reporting?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

1.2 Architecting for Governance, Risk, and Compliance (GRC) ISSAP Practice Questions (Page 8)

Questions 36–37

A government agency is designing a system to handle sensitive citizen data. The system must support forensic investigations in case of a security incident. Which design feature is essential for forensic readiness?

What is the primary purpose of vulnerability management reporting?

Keep studying — Governance, Risk, and Compliance (GRC)