SY0-701 Question 198

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Compare internal policy to outside regulators. That is an external examination (or external audit). An internal audit uses your own team.

• Chose C2

  Attestation is the process of comparison with the outside regulators by getting a 3rd party to vet

• Chose D3

  Answer: D. External examination Explanation: An external examination is the best approach for the CISO to gain an understanding of how the company's security policies compare to the requirements imposed by external regulators. This process typically involves an external party, such as a third-party auditor or regulatory body, reviewing the company's security policies and controls to ensure they align with industry regulations and standards. While internal audits (B) assess the company's internal controls and practices, external examinations provide an unbiased review from an external perspective, which is essential for understanding compliance with external regulatory requirements.