{"id":112181,"date":"2025-10-14T06:20:52","date_gmt":"2025-10-14T06:20:52","guid":{"rendered":"https:\/\/www.dumpsbase.com\/freedumps\/?p=112181"},"modified":"2025-10-14T06:20:58","modified_gmt":"2025-10-14T06:20:58","slug":"hitrust-ccsfp-dumps-v9-02-the-most-updated-ccsfp-exam-preparation-materials-with-guaranteed-success","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/hitrust-ccsfp-dumps-v9-02-the-most-updated-ccsfp-exam-preparation-materials-with-guaranteed-success.html","title":{"rendered":"HITRUST CCSFP Dumps (V9.02) &#8211; The Most Updated CCSFP Exam Preparation Materials with Guaranteed Success"},"content":{"rendered":"<p>You must choose the most updated study materials to prepare for your Certified CSF Practitioner CCSFP Certification exam. DumpsBase offers the CCSFP dumps (V9.02) with 141 practice exam questions and answers, covering all the Certified CSF Practitioner exam topics to provide you with comprehensive information. All these questions and answers have been verified by the certified professionals. They guarantee your success on your first attempt. So now, choose DumpsBase and start your <a href=\"https:\/\/www.dumpsbase.com\/hitrust.html\"><em><strong>HITRUST<\/strong><\/em><\/a> Certified CSF Practitioner CCSFP exam preparation. With verified CCSFP exam questions and a trusted support system, your chances of success increase dramatically. Begin your preparation today and take the next step toward achieving your professional goals.<\/p>\n<h2>We have <span style=\"background-color: #ff9900;\"><em>CCSFP free dumps of V9.02 below<\/em><\/span> to help you check the quality first:<\/h2>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam10947\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-10947\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-10947\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-431328'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>Which assessment type tests against requirement statements considered essential to cybersecurity hygiene?<\/div><input type='hidden' name='question_id[]' id='qID_1' value='431328' \/><input type='hidden' id='answerType431328' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431328[]' id='answer-id-1669163' class='answer   answerof-431328 ' value='1669163'   \/><label for='answer-id-1669163' id='answer-label-1669163' class=' answer'><span>e1 Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431328[]' id='answer-id-1669164' class='answer   answerof-431328 ' value='1669164'   \/><label for='answer-id-1669164' id='answer-label-1669164' class=' answer'><span>r2 Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431328[]' id='answer-id-1669165' class='answer   answerof-431328 ' value='1669165'   \/><label for='answer-id-1669165' id='answer-label-1669165' class=' answer'><span>Targeted Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431328[]' id='answer-id-1669166' class='answer   answerof-431328 ' value='1669166'   \/><label for='answer-id-1669166' id='answer-label-1669166' class=' answer'><span>i1 Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431328[]' id='answer-id-1669167' class='answer   answerof-431328 ' value='1669167'   \/><label for='answer-id-1669167' id='answer-label-1669167' class=' answer'><span>None of the above<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-431329'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>The A1 Security Assessment requirements can only be added to the r2 assessment type.<\/div><input type='hidden' name='question_id[]' id='qID_2' value='431329' \/><input type='hidden' id='answerType431329' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431329[]' id='answer-id-1669168' class='answer   answerof-431329 ' value='1669168'   \/><label for='answer-id-1669168' id='answer-label-1669168' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431329[]' id='answer-id-1669169' class='answer   answerof-431329 ' value='1669169'   \/><label for='answer-id-1669169' id='answer-label-1669169' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-431330'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>Select the four general risk factor categories used when scoping r2 assessments.<\/div><input type='hidden' name='question_id[]' id='qID_3' value='431330' \/><input type='hidden' id='answerType431330' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431330[]' id='answer-id-1669170' class='answer   answerof-431330 ' value='1669170'   \/><label for='answer-id-1669170' id='answer-label-1669170' class=' answer'><span>Technical<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431330[]' id='answer-id-1669171' class='answer   answerof-431330 ' value='1669171'   \/><label for='answer-id-1669171' id='answer-label-1669171' class=' answer'><span>General<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431330[]' id='answer-id-1669172' class='answer   answerof-431330 ' value='1669172'   \/><label for='answer-id-1669172' id='answer-label-1669172' class=' answer'><span>Organizational<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431330[]' id='answer-id-1669173' class='answer   answerof-431330 ' value='1669173'   \/><label for='answer-id-1669173' id='answer-label-1669173' class=' answer'><span>Compliance<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431330[]' id='answer-id-1669174' class='answer   answerof-431330 ' value='1669174'   \/><label for='answer-id-1669174' id='answer-label-1669174' class=' answer'><span>Operational<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431330[]' id='answer-id-1669175' class='answer   answerof-431330 ' value='1669175'   \/><label for='answer-id-1669175' id='answer-label-1669175' class=' answer'><span>Privacy<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-431331'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>Once an assessment has been submitted to the assessor, can the assessed entity change their responses?<\/div><input type='hidden' name='question_id[]' id='qID_4' value='431331' \/><input type='hidden' id='answerType431331' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431331[]' id='answer-id-1669176' class='answer   answerof-431331 ' value='1669176'   \/><label for='answer-id-1669176' id='answer-label-1669176' class=' answer'><span>Yes, if the assessor reverts the Requirement Statement<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431331[]' id='answer-id-1669177' class='answer   answerof-431331 ' value='1669177'   \/><label for='answer-id-1669177' id='answer-label-1669177' class=' answer'><span>Yes, if HITRUST reverts the Requirement Statement<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-431332'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>Is the Payment Card Industry C Data Security Standard (PCI-DSS) a Risk Management Framework (RMF)?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='431332' \/><input type='hidden' id='answerType431332' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431332[]' id='answer-id-1669178' class='answer   answerof-431332 ' value='1669178'   \/><label for='answer-id-1669178' id='answer-label-1669178' class=' answer'><span>Yes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431332[]' id='answer-id-1669179' class='answer   answerof-431332 ' value='1669179'   \/><label for='answer-id-1669179' id='answer-label-1669179' class=' answer'><span>No<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-431333'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>Control Objectives are a statement of the desired result or purpose to be achieved by implementing control procedures into a particular process.<\/div><input type='hidden' name='question_id[]' id='qID_6' value='431333' \/><input type='hidden' id='answerType431333' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431333[]' id='answer-id-1669180' class='answer   answerof-431333 ' value='1669180'   \/><label for='answer-id-1669180' id='answer-label-1669180' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431333[]' id='answer-id-1669181' class='answer   answerof-431333 ' value='1669181'   \/><label for='answer-id-1669181' id='answer-label-1669181' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-431334'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>What characteristics would allow grouping of multiple like components together?<\/div><input type='hidden' name='question_id[]' id='qID_7' value='431334' \/><input type='hidden' id='answerType431334' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431334[]' id='answer-id-1669182' class='answer   answerof-431334 ' value='1669182'   \/><label for='answer-id-1669182' id='answer-label-1669182' class=' answer'><span>Systems with the same configurations<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431334[]' id='answer-id-1669183' class='answer   answerof-431334 ' value='1669183'   \/><label for='answer-id-1669183' id='answer-label-1669183' class=' answer'><span>Systems with the same patch levels<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431334[]' id='answer-id-1669184' class='answer   answerof-431334 ' value='1669184'   \/><label for='answer-id-1669184' id='answer-label-1669184' class=' answer'><span>Facilities with the same access management systems<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431334[]' id='answer-id-1669185' class='answer   answerof-431334 ' value='1669185'   \/><label for='answer-id-1669185' id='answer-label-1669185' class=' answer'><span>All of the above<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-431335'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>Vulnerability testing should never be performed on client systems by an external assessor.<\/div><input type='hidden' name='question_id[]' id='qID_8' value='431335' \/><input type='hidden' id='answerType431335' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431335[]' id='answer-id-1669186' class='answer   answerof-431335 ' value='1669186'   \/><label for='answer-id-1669186' id='answer-label-1669186' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431335[]' id='answer-id-1669187' class='answer   answerof-431335 ' value='1669187'   \/><label for='answer-id-1669187' id='answer-label-1669187' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-431336'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>Which assessment type allows users to select any HITRUST authoritative source?<\/div><input type='hidden' name='question_id[]' id='qID_9' value='431336' \/><input type='hidden' id='answerType431336' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431336[]' id='answer-id-1669188' class='answer   answerof-431336 ' value='1669188'   \/><label for='answer-id-1669188' id='answer-label-1669188' class=' answer'><span>Readiness Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431336[]' id='answer-id-1669189' class='answer   answerof-431336 ' value='1669189'   \/><label for='answer-id-1669189' id='answer-label-1669189' class=' answer'><span>Validated Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431336[]' id='answer-id-1669190' class='answer   answerof-431336 ' value='1669190'   \/><label for='answer-id-1669190' id='answer-label-1669190' class=' answer'><span>r2 Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431336[]' id='answer-id-1669191' class='answer   answerof-431336 ' value='1669191'   \/><label for='answer-id-1669191' id='answer-label-1669191' class=' answer'><span>e1 Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431336[]' id='answer-id-1669192' class='answer   answerof-431336 ' value='1669192'   \/><label for='answer-id-1669192' id='answer-label-1669192' class=' answer'><span>None of the above<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-431337'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>An r2 Requirement Statement that scores at a 37 would yield which result?<\/div><input type='hidden' name='question_id[]' id='qID_10' value='431337' \/><input type='hidden' id='answerType431337' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431337[]' id='answer-id-1669193' class='answer   answerof-431337 ' value='1669193'   \/><label for='answer-id-1669193' id='answer-label-1669193' class=' answer'><span>No Gap<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431337[]' id='answer-id-1669194' class='answer   answerof-431337 ' value='1669194'   \/><label for='answer-id-1669194' id='answer-label-1669194' class=' answer'><span>HITRUST Certification<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431337[]' id='answer-id-1669195' class='answer   answerof-431337 ' value='1669195'   \/><label for='answer-id-1669195' id='answer-label-1669195' class=' answer'><span>Risk Acceptance<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431337[]' id='answer-id-1669196' class='answer   answerof-431337 ' value='1669196'   \/><label for='answer-id-1669196' id='answer-label-1669196' class=' answer'><span>Function Gap<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431337[]' id='answer-id-1669197' class='answer   answerof-431337 ' value='1669197'   \/><label for='answer-id-1669197' id='answer-label-1669197' class=' answer'><span>Gap with possible required CAP<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-431338'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>Requirement Statement scores are averaged to determine Control Reference and Domain scores.<\/div><input type='hidden' name='question_id[]' id='qID_11' value='431338' \/><input type='hidden' id='answerType431338' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431338[]' id='answer-id-1669198' class='answer   answerof-431338 ' value='1669198'   \/><label for='answer-id-1669198' id='answer-label-1669198' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431338[]' id='answer-id-1669199' class='answer   answerof-431338 ' value='1669199'   \/><label for='answer-id-1669199' id='answer-label-1669199' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-431339'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>How is the sample of Requirement Statements within an interim assessment selected for testing?<\/div><input type='hidden' name='question_id[]' id='qID_12' value='431339' \/><input type='hidden' id='answerType431339' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431339[]' id='answer-id-1669200' class='answer   answerof-431339 ' value='1669200'   \/><label for='answer-id-1669200' id='answer-label-1669200' class=' answer'><span>By the assessor personnel<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431339[]' id='answer-id-1669201' class='answer   answerof-431339 ' value='1669201'   \/><label for='answer-id-1669201' id='answer-label-1669201' class=' answer'><span>By client personnel<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431339[]' id='answer-id-1669202' class='answer   answerof-431339 ' value='1669202'   \/><label for='answer-id-1669202' id='answer-label-1669202' class=' answer'><span>Randomly by the MyCSF tool<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431339[]' id='answer-id-1669203' class='answer   answerof-431339 ' value='1669203'   \/><label for='answer-id-1669203' id='answer-label-1669203' class=' answer'><span>Any with associated gaps<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431339[]' id='answer-id-1669204' class='answer   answerof-431339 ' value='1669204'   \/><label for='answer-id-1669204' id='answer-label-1669204' class=' answer'><span>Any with required CAPs<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-431340'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>When scoping an r2 assessment, selecting regulatory factors is required and may generate additional Requirement Statements in the assessment object.<\/div><input type='hidden' name='question_id[]' id='qID_13' value='431340' \/><input type='hidden' id='answerType431340' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431340[]' id='answer-id-1669205' class='answer   answerof-431340 ' value='1669205'   \/><label for='answer-id-1669205' id='answer-label-1669205' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431340[]' id='answer-id-1669206' class='answer   answerof-431340 ' value='1669206'   \/><label for='answer-id-1669206' id='answer-label-1669206' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-431341'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>What type of deficiency would be identified in the following Requirement Statement scoring scenario? <br \/>\r<br>Policy = 50% <br \/>\r<br>Process = 50% <br \/>\r<br>Implemented = 75% <br \/>\r<br>Measured = 0% <br \/>\r<br>Managed = 0%<\/div><input type='hidden' name='question_id[]' id='qID_14' value='431341' \/><input type='hidden' id='answerType431341' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431341[]' id='answer-id-1669207' class='answer   answerof-431341 ' value='1669207'   \/><label for='answer-id-1669207' id='answer-label-1669207' class=' answer'><span>No deficiency<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431341[]' id='answer-id-1669208' class='answer   answerof-431341 ' value='1669208'   \/><label for='answer-id-1669208' id='answer-label-1669208' class=' answer'><span>Gap<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431341[]' id='answer-id-1669209' class='answer   answerof-431341 ' value='1669209'   \/><label for='answer-id-1669209' id='answer-label-1669209' class=' answer'><span>Required CAP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431341[]' id='answer-id-1669210' class='answer   answerof-431341 ' value='1669210'   \/><label for='answer-id-1669210' id='answer-label-1669210' class=' answer'><span>Not enough information to determine<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-431342'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>Control Reference scores are averaged to determine Domain scores.<\/div><input type='hidden' name='question_id[]' id='qID_15' value='431342' \/><input type='hidden' id='answerType431342' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431342[]' id='answer-id-1669211' class='answer   answerof-431342 ' value='1669211'   \/><label for='answer-id-1669211' id='answer-label-1669211' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431342[]' id='answer-id-1669212' class='answer   answerof-431342 ' value='1669212'   \/><label for='answer-id-1669212' id='answer-label-1669212' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-431343'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>How large would the sample size be for a manual control with a population of 56 unique items?<\/div><input type='hidden' name='question_id[]' id='qID_16' value='431343' \/><input type='hidden' id='answerType431343' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431343[]' id='answer-id-1669213' class='answer   answerof-431343 ' value='1669213'   \/><label for='answer-id-1669213' id='answer-label-1669213' class=' answer'><span>5<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431343[]' id='answer-id-1669214' class='answer   answerof-431343 ' value='1669214'   \/><label for='answer-id-1669214' id='answer-label-1669214' class=' answer'><span>8<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431343[]' id='answer-id-1669215' class='answer   answerof-431343 ' value='1669215'   \/><label for='answer-id-1669215' id='answer-label-1669215' class=' answer'><span>6<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431343[]' id='answer-id-1669216' class='answer   answerof-431343 ' value='1669216'   \/><label for='answer-id-1669216' id='answer-label-1669216' class=' answer'><span>25<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431343[]' id='answer-id-1669217' class='answer   answerof-431343 ' value='1669217'   \/><label for='answer-id-1669217' id='answer-label-1669217' class=' answer'><span>56<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-431344'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>If an organization has a policy against uploading sensitive data to third parties, what option would facilitate providing evidence to the HITRUST QA team to support maturity level scoring?<\/div><input type='hidden' name='question_id[]' id='qID_17' value='431344' \/><input type='hidden' id='answerType431344' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431344[]' id='answer-id-1669218' class='answer   answerof-431344 ' value='1669218'   \/><label for='answer-id-1669218' id='answer-label-1669218' class=' answer'><span>Live QA<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431344[]' id='answer-id-1669219' class='answer   answerof-431344 ' value='1669219'   \/><label for='answer-id-1669219' id='answer-label-1669219' class=' answer'><span>QA Tasks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431344[]' id='answer-id-1669220' class='answer   answerof-431344 ' value='1669220'   \/><label for='answer-id-1669220' id='answer-label-1669220' class=' answer'><span>Onsite visit by QA team<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431344[]' id='answer-id-1669221' class='answer   answerof-431344 ' value='1669221'   \/><label for='answer-id-1669221' id='answer-label-1669221' class=' answer'><span>Escalated QA<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-431345'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>The HITRUST QA reservation must be made by the External Assessor at least six months in advance of the submission date.<\/div><input type='hidden' name='question_id[]' id='qID_18' value='431345' \/><input type='hidden' id='answerType431345' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431345[]' id='answer-id-1669222' class='answer   answerof-431345 ' value='1669222'   \/><label for='answer-id-1669222' id='answer-label-1669222' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431345[]' id='answer-id-1669223' class='answer   answerof-431345 ' value='1669223'   \/><label for='answer-id-1669223' id='answer-label-1669223' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-431346'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>A pharmacy that accepts Medicare\/Medicaid and also takes credit cards should include which regulatory factors in their assessment?<\/div><input type='hidden' name='question_id[]' id='qID_19' value='431346' \/><input type='hidden' id='answerType431346' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431346[]' id='answer-id-1669224' class='answer   answerof-431346 ' value='1669224'   \/><label for='answer-id-1669224' id='answer-label-1669224' class=' answer'><span>FISMA<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431346[]' id='answer-id-1669225' class='answer   answerof-431346 ' value='1669225'   \/><label for='answer-id-1669225' id='answer-label-1669225' class=' answer'><span>FTC Red Flags Rule<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431346[]' id='answer-id-1669226' class='answer   answerof-431346 ' value='1669226'   \/><label for='answer-id-1669226' id='answer-label-1669226' class=' answer'><span>PCI-DSS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431346[]' id='answer-id-1669227' class='answer   answerof-431346 ' value='1669227'   \/><label for='answer-id-1669227' id='answer-label-1669227' class=' answer'><span>FedRAMP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431346[]' id='answer-id-1669228' class='answer   answerof-431346 ' value='1669228'   \/><label for='answer-id-1669228' id='answer-label-1669228' class=' answer'><span>CMS (Centers for Medicare and Medicaid Services) Minimum Security Requirements (High)<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-431347'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>If an organization's relying party is requesting an Insights Report covering AI risks, which of the following factors should be added to an assessment?<\/div><input type='hidden' name='question_id[]' id='qID_20' value='431347' \/><input type='hidden' id='answerType431347' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431347[]' id='answer-id-1669229' class='answer   answerof-431347 ' value='1669229'   \/><label for='answer-id-1669229' id='answer-label-1669229' class=' answer'><span>The A1 Security Assessment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431347[]' id='answer-id-1669230' class='answer   answerof-431347 ' value='1669230'   \/><label for='answer-id-1669230' id='answer-label-1669230' class=' answer'><span>The A1 Risk Assessment<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-21' style=';'><div id='questionWrap-21'  class='   watupro-question-id-431348'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>21. <\/span>Halfway through an r2 assessment, management asks to add six implemented systems to the scope of primary components. <br \/>\r<br>What would the assessor need to do within MyCSF?<\/div><input type='hidden' name='question_id[]' id='qID_21' value='431348' \/><input type='hidden' id='answerType431348' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431348[]' id='answer-id-1669231' class='answer   answerof-431348 ' value='1669231'   \/><label for='answer-id-1669231' id='answer-label-1669231' class=' answer'><span>Revert all Requirement Statements completed by the assessor so the client can consider control impact<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431348[]' id='answer-id-1669232' class='answer   answerof-431348 ' value='1669232'   \/><label for='answer-id-1669232' id='answer-label-1669232' class=' answer'><span>Update the &quot;Scope of the Assessment&quot; tab in the assessment object<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431348[]' id='answer-id-1669233' class='answer   answerof-431348 ' value='1669233'   \/><label for='answer-id-1669233' id='answer-label-1669233' class=' answer'><span>Remove all authoritative sources added to the assessment object<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431348[]' id='answer-id-1669234' class='answer   answerof-431348 ' value='1669234'   \/><label for='answer-id-1669234' id='answer-label-1669234' class=' answer'><span>Request a Bridge Certificate<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-22' style=';'><div id='questionWrap-22'  class='   watupro-question-id-431349'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>22. <\/span>Firewalls with identical configurations can be grouped for testing as one component.<\/div><input type='hidden' name='question_id[]' id='qID_22' value='431349' \/><input type='hidden' id='answerType431349' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431349[]' id='answer-id-1669235' class='answer   answerof-431349 ' value='1669235'   \/><label for='answer-id-1669235' id='answer-label-1669235' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431349[]' id='answer-id-1669236' class='answer   answerof-431349 ' value='1669236'   \/><label for='answer-id-1669236' id='answer-label-1669236' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-23' style=';'><div id='questionWrap-23'  class='   watupro-question-id-431350'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>23. <\/span>How many domains are there in an assessment?<\/div><input type='hidden' name='question_id[]' id='qID_23' value='431350' \/><input type='hidden' id='answerType431350' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431350[]' id='answer-id-1669237' class='answer   answerof-431350 ' value='1669237'   \/><label for='answer-id-1669237' id='answer-label-1669237' class=' answer'><span>19<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431350[]' id='answer-id-1669238' class='answer   answerof-431350 ' value='1669238'   \/><label for='answer-id-1669238' id='answer-label-1669238' class=' answer'><span>10<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431350[]' id='answer-id-1669239' class='answer   answerof-431350 ' value='1669239'   \/><label for='answer-id-1669239' id='answer-label-1669239' class=' answer'><span>20<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431350[]' id='answer-id-1669240' class='answer   answerof-431350 ' value='1669240'   \/><label for='answer-id-1669240' id='answer-label-1669240' class=' answer'><span>15<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-24' style=';'><div id='questionWrap-24'  class='   watupro-question-id-431351'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>24. <\/span>The HITRUST CSF is updated on an annual basis.<\/div><input type='hidden' name='question_id[]' id='qID_24' value='431351' \/><input type='hidden' id='answerType431351' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431351[]' id='answer-id-1669241' class='answer   answerof-431351 ' value='1669241'   \/><label for='answer-id-1669241' id='answer-label-1669241' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431351[]' id='answer-id-1669242' class='answer   answerof-431351 ' value='1669242'   \/><label for='answer-id-1669242' id='answer-label-1669242' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-25' style=';'><div id='questionWrap-25'  class='   watupro-question-id-431352'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>25. <\/span>When performing r2 assessments, any added compliance factors should be considered before marking a requirement statement &quot;N\/A&quot;.<\/div><input type='hidden' name='question_id[]' id='qID_25' value='431352' \/><input type='hidden' id='answerType431352' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431352[]' id='answer-id-1669243' class='answer   answerof-431352 ' value='1669243'   \/><label for='answer-id-1669243' id='answer-label-1669243' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431352[]' id='answer-id-1669244' class='answer   answerof-431352 ' value='1669244'   \/><label for='answer-id-1669244' id='answer-label-1669244' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-26' style=';'><div id='questionWrap-26'  class='   watupro-question-id-431353'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>26. <\/span>During HITRUST's QA phase of a Validated Assessment, HITRUST picks a sample of Control Objectives to review the assessor's validation and testing procedures.<\/div><input type='hidden' name='question_id[]' id='qID_26' value='431353' \/><input type='hidden' id='answerType431353' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431353[]' id='answer-id-1669245' class='answer   answerof-431353 ' value='1669245'   \/><label for='answer-id-1669245' id='answer-label-1669245' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431353[]' id='answer-id-1669246' class='answer   answerof-431353 ' value='1669246'   \/><label for='answer-id-1669246' id='answer-label-1669246' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-27' style=';'><div id='questionWrap-27'  class='   watupro-question-id-431354'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>27. <\/span>When conducting a Validated Assessment, the entity must score the Measured and Managed maturity levels.<\/div><input type='hidden' name='question_id[]' id='qID_27' value='431354' \/><input type='hidden' id='answerType431354' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431354[]' id='answer-id-1669247' class='answer   answerof-431354 ' value='1669247'   \/><label for='answer-id-1669247' id='answer-label-1669247' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431354[]' id='answer-id-1669248' class='answer   answerof-431354 ' value='1669248'   \/><label for='answer-id-1669248' id='answer-label-1669248' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-28' style=';'><div id='questionWrap-28'  class='   watupro-question-id-431355'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>28. <\/span>David, a member of an external assessor organization, helped his client remediate a control gap. As part of the validation process, David can then review the remediation for appropriateness.<\/div><input type='hidden' name='question_id[]' id='qID_28' value='431355' \/><input type='hidden' id='answerType431355' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431355[]' id='answer-id-1669249' class='answer   answerof-431355 ' value='1669249'   \/><label for='answer-id-1669249' id='answer-label-1669249' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431355[]' id='answer-id-1669250' class='answer   answerof-431355 ' value='1669250'   \/><label for='answer-id-1669250' id='answer-label-1669250' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-29' style=';'><div id='questionWrap-29'  class='   watupro-question-id-431356'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>29. <\/span>For the maturity levels &quot;Measured&quot; and &quot;Managed,&quot; any score above 50% requires the following supporting documentation. (Select all that apply)<\/div><input type='hidden' name='question_id[]' id='qID_29' value='431356' \/><input type='hidden' id='answerType431356' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431356[]' id='answer-id-1669251' class='answer   answerof-431356 ' value='1669251'   \/><label for='answer-id-1669251' id='answer-label-1669251' class=' answer'><span>Organizational scoping factors<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431356[]' id='answer-id-1669252' class='answer   answerof-431356 ' value='1669252'   \/><label for='answer-id-1669252' id='answer-label-1669252' class=' answer'><span>Processes used to manage the risk of identified control deficiencies<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431356[]' id='answer-id-1669253' class='answer   answerof-431356 ' value='1669253'   \/><label for='answer-id-1669253' id='answer-label-1669253' class=' answer'><span>Reports used to document control environment monitoring<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431356[]' id='answer-id-1669254' class='answer   answerof-431356 ' value='1669254'   \/><label for='answer-id-1669254' id='answer-label-1669254' class=' answer'><span>Individuals responsible for measuring the control environment<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-30' style=';'><div id='questionWrap-30'  class='   watupro-question-id-431357'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>30. <\/span>On an r2 assessment, HITRUST requires evidence to be linked to all maturity levels that score above 25% for Policy and Procedure, and over 0% for Implementation, Measured, and Managed.<\/div><input type='hidden' name='question_id[]' id='qID_30' value='431357' \/><input type='hidden' id='answerType431357' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431357[]' id='answer-id-1669255' class='answer   answerof-431357 ' value='1669255'   \/><label for='answer-id-1669255' id='answer-label-1669255' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431357[]' id='answer-id-1669256' class='answer   answerof-431357 ' value='1669256'   \/><label for='answer-id-1669256' id='answer-label-1669256' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-31' style=';'><div id='questionWrap-31'  class='   watupro-question-id-431358'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>31. <\/span>A validated assessment may lead to either a validated report or a validated report with certification.<\/div><input type='hidden' name='question_id[]' id='qID_31' value='431358' \/><input type='hidden' id='answerType431358' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431358[]' id='answer-id-1669257' class='answer   answerof-431358 ' value='1669257'   \/><label for='answer-id-1669257' id='answer-label-1669257' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431358[]' id='answer-id-1669258' class='answer   answerof-431358 ' value='1669258'   \/><label for='answer-id-1669258' id='answer-label-1669258' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-32' style=';'><div id='questionWrap-32'  class='   watupro-question-id-431359'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>32. <\/span>The Offline Assessment function allows assessors which capability?<\/div><input type='hidden' name='question_id[]' id='qID_32' value='431359' \/><input type='hidden' id='answerType431359' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431359[]' id='answer-id-1669259' class='answer   answerof-431359 ' value='1669259'   \/><label for='answer-id-1669259' id='answer-label-1669259' class=' answer'><span>Download the entire CSF into an Excel spreadsheet<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431359[]' id='answer-id-1669260' class='answer   answerof-431359 ' value='1669260'   \/><label for='answer-id-1669260' id='answer-label-1669260' class=' answer'><span>Download an assessment's Requirement Statements into an Excel spreadsheet<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431359[]' id='answer-id-1669261' class='answer   answerof-431359 ' value='1669261'   \/><label for='answer-id-1669261' id='answer-label-1669261' class=' answer'><span>Upload the results from an assessor-developed spreadsheet directly into the MyCSF tool<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431359[]' id='answer-id-1669262' class='answer   answerof-431359 ' value='1669262'   \/><label for='answer-id-1669262' id='answer-label-1669262' class=' answer'><span>Submit their client's assessment to HITRUST QA outside of the MyCSF tool<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-33' style=';'><div id='questionWrap-33'  class='   watupro-question-id-431360'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>33. <\/span>The Subscribers Comments field should be populated with the rationale for any requirement statement marked not-applicable (N\/A).<\/div><input type='hidden' name='question_id[]' id='qID_33' value='431360' \/><input type='hidden' id='answerType431360' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431360[]' id='answer-id-1669263' class='answer   answerof-431360 ' value='1669263'   \/><label for='answer-id-1669263' id='answer-label-1669263' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431360[]' id='answer-id-1669264' class='answer   answerof-431360 ' value='1669264'   \/><label for='answer-id-1669264' id='answer-label-1669264' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-34' style=';'><div id='questionWrap-34'  class='   watupro-question-id-431361'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>34. <\/span>Organizations that process sensitive data face multiple challenges relating to information security and privacy.<\/div><input type='hidden' name='question_id[]' id='qID_34' value='431361' \/><input type='hidden' id='answerType431361' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431361[]' id='answer-id-1669265' class='answer   answerof-431361 ' value='1669265'   \/><label for='answer-id-1669265' id='answer-label-1669265' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431361[]' id='answer-id-1669266' class='answer   answerof-431361 ' value='1669266'   \/><label for='answer-id-1669266' id='answer-label-1669266' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-35' style=';'><div id='questionWrap-35'  class='   watupro-question-id-431362'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>35. <\/span>Measured and Managed Maturity Levels can be scored for some, but not all, requirements in an r2 assessment object.<\/div><input type='hidden' name='question_id[]' id='qID_35' value='431362' \/><input type='hidden' id='answerType431362' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431362[]' id='answer-id-1669267' class='answer   answerof-431362 ' value='1669267'   \/><label for='answer-id-1669267' id='answer-label-1669267' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431362[]' id='answer-id-1669268' class='answer   answerof-431362 ' value='1669268'   \/><label for='answer-id-1669268' id='answer-label-1669268' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-36' style=';'><div id='questionWrap-36'  class='   watupro-question-id-431363'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>36. <\/span>An e1, i1, or r2 validated assessment must be performed by an approved HITRUST assessor.<\/div><input type='hidden' name='question_id[]' id='qID_36' value='431363' \/><input type='hidden' id='answerType431363' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431363[]' id='answer-id-1669269' class='answer   answerof-431363 ' value='1669269'   \/><label for='answer-id-1669269' id='answer-label-1669269' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431363[]' id='answer-id-1669270' class='answer   answerof-431363 ' value='1669270'   \/><label for='answer-id-1669270' id='answer-label-1669270' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-37' style=';'><div id='questionWrap-37'  class='   watupro-question-id-431364'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>37. <\/span>Can certification be achieved when scoring 100% on the following maturity levels within an r2 Assessment Object? <br \/>\r<br>Policy: 100% <br \/>\r<br>Procedure: 100% <br \/>\r<br>Implementation: 100% <br \/>\r<br>Measured: 0% <br \/>\r<br>Managed: 0%<\/div><input type='hidden' name='question_id[]' id='qID_37' value='431364' \/><input type='hidden' id='answerType431364' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431364[]' id='answer-id-1669271' class='answer   answerof-431364 ' value='1669271'   \/><label for='answer-id-1669271' id='answer-label-1669271' class=' answer'><span>Yes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431364[]' id='answer-id-1669272' class='answer   answerof-431364 ' value='1669272'   \/><label for='answer-id-1669272' id='answer-label-1669272' class=' answer'><span>No<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-38' style=';'><div id='questionWrap-38'  class='   watupro-question-id-431365'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>38. <\/span>Does the HITRUST CSF encompass all requirements from the authoritative sources mapped to an assessment object?<\/div><input type='hidden' name='question_id[]' id='qID_38' value='431365' \/><input type='hidden' id='answerType431365' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431365[]' id='answer-id-1669273' class='answer   answerof-431365 ' value='1669273'   \/><label for='answer-id-1669273' id='answer-label-1669273' class=' answer'><span>Yes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431365[]' id='answer-id-1669274' class='answer   answerof-431365 ' value='1669274'   \/><label for='answer-id-1669274' id='answer-label-1669274' class=' answer'><span>No<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-39' style=';'><div id='questionWrap-39'  class='   watupro-question-id-431366'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>39. <\/span>When testing, can you sample across a population of ungrouped primary components within an assessment's scope?<\/div><input type='hidden' name='question_id[]' id='qID_39' value='431366' \/><input type='hidden' id='answerType431366' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431366[]' id='answer-id-1669275' class='answer   answerof-431366 ' value='1669275'   \/><label for='answer-id-1669275' id='answer-label-1669275' class=' answer'><span>Yes, across most of the components within scope<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431366[]' id='answer-id-1669276' class='answer   answerof-431366 ' value='1669276'   \/><label for='answer-id-1669276' id='answer-label-1669276' class=' answer'><span>No, you must test all components within scope<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431366[]' id='answer-id-1669277' class='answer   answerof-431366 ' value='1669277'   \/><label for='answer-id-1669277' id='answer-label-1669277' class=' answer'><span>Yes, across some of the components within scope<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431366[]' id='answer-id-1669278' class='answer   answerof-431366 ' value='1669278'   \/><label for='answer-id-1669278' id='answer-label-1669278' class=' answer'><span>Yes, a primary component sample can be produced using guidance from the scoring rubric<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-40' style=';'><div id='questionWrap-40'  class='   watupro-question-id-431367'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>40. <\/span>An r2 certification is good for how many years?<\/div><input type='hidden' name='question_id[]' id='qID_40' value='431367' \/><input type='hidden' id='answerType431367' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431367[]' id='answer-id-1669279' class='answer   answerof-431367 ' value='1669279'   \/><label for='answer-id-1669279' id='answer-label-1669279' class=' answer'><span>Two years provided an interim assessment is performed, all CAPs have been remediated, and all N\/As discharged<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431367[]' id='answer-id-1669280' class='answer   answerof-431367 ' value='1669280'   \/><label for='answer-id-1669280' id='answer-label-1669280' class=' answer'><span>Two years provided an interim assessment is performed and interim requirements are met<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431367[]' id='answer-id-1669281' class='answer   answerof-431367 ' value='1669281'   \/><label for='answer-id-1669281' id='answer-label-1669281' class=' answer'><span>Two years regardless<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431367[]' id='answer-id-1669282' class='answer   answerof-431367 ' value='1669282'   \/><label for='answer-id-1669282' id='answer-label-1669282' class=' answer'><span>Until there has been a significant change in the in-scope environment<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-41' style=';'><div id='questionWrap-41'  class='   watupro-question-id-431368'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>41. <\/span>Is the HITRUST CSF a replacement standard for HIPAA or NIST 800-53?<\/div><input type='hidden' name='question_id[]' id='qID_41' value='431368' \/><input type='hidden' id='answerType431368' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431368[]' id='answer-id-1669283' class='answer   answerof-431368 ' value='1669283'   \/><label for='answer-id-1669283' id='answer-label-1669283' class=' answer'><span>Yes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431368[]' id='answer-id-1669284' class='answer   answerof-431368 ' value='1669284'   \/><label for='answer-id-1669284' id='answer-label-1669284' class=' answer'><span>No<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-42' style=';'><div id='questionWrap-42'  class='   watupro-question-id-431369'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>42. <\/span>Is additional work required by the assessor to generate the NIST Cybersecurity Framework Report?<\/div><input type='hidden' name='question_id[]' id='qID_42' value='431369' \/><input type='hidden' id='answerType431369' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431369[]' id='answer-id-1669285' class='answer   answerof-431369 ' value='1669285'   \/><label for='answer-id-1669285' id='answer-label-1669285' class=' answer'><span>Yes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431369[]' id='answer-id-1669286' class='answer   answerof-431369 ' value='1669286'   \/><label for='answer-id-1669286' id='answer-label-1669286' class=' answer'><span>No<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-43' style=';'><div id='questionWrap-43'  class='   watupro-question-id-431370'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>43. <\/span>Who defines the scope of an assessment?<\/div><input type='hidden' name='question_id[]' id='qID_43' value='431370' \/><input type='hidden' id='answerType431370' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431370[]' id='answer-id-1669287' class='answer   answerof-431370 ' value='1669287'   \/><label for='answer-id-1669287' id='answer-label-1669287' class=' answer'><span>Client Management<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431370[]' id='answer-id-1669288' class='answer   answerof-431370 ' value='1669288'   \/><label for='answer-id-1669288' id='answer-label-1669288' class=' answer'><span>The Assessor<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431370[]' id='answer-id-1669289' class='answer   answerof-431370 ' value='1669289'   \/><label for='answer-id-1669289' id='answer-label-1669289' class=' answer'><span>HITRUST<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-44' style=';'><div id='questionWrap-44'  class='   watupro-question-id-431371'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>44. <\/span>Which of the following is NOT one of the Technical risk factors?<\/div><input type='hidden' name='question_id[]' id='qID_44' value='431371' \/><input type='hidden' id='answerType431371' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431371[]' id='answer-id-1669290' class='answer   answerof-431371 ' value='1669290'   \/><label for='answer-id-1669290' id='answer-label-1669290' class=' answer'><span>Number of Facilities<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431371[]' id='answer-id-1669291' class='answer   answerof-431371 ' value='1669291'   \/><label for='answer-id-1669291' id='answer-label-1669291' class=' answer'><span>Number of Users<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431371[]' id='answer-id-1669292' class='answer   answerof-431371 ' value='1669292'   \/><label for='answer-id-1669292' id='answer-label-1669292' class=' answer'><span>Number of Transactions<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431371[]' id='answer-id-1669293' class='answer   answerof-431371 ' value='1669293'   \/><label for='answer-id-1669293' id='answer-label-1669293' class=' answer'><span>Accessible from the Internet<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-45' style=';'><div id='questionWrap-45'  class='   watupro-question-id-431372'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>45. <\/span>Corrective Action Plans (CAPs) can be viewed centrally across multiple assessment objects.<\/div><input type='hidden' name='question_id[]' id='qID_45' value='431372' \/><input type='hidden' id='answerType431372' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431372[]' id='answer-id-1669294' class='answer   answerof-431372 ' value='1669294'   \/><label for='answer-id-1669294' id='answer-label-1669294' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431372[]' id='answer-id-1669295' class='answer   answerof-431372 ' value='1669295'   \/><label for='answer-id-1669295' id='answer-label-1669295' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-46' style=';'><div id='questionWrap-46'  class='   watupro-question-id-431373'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>46. <\/span>Gaps with required CAPS must have documented remediation plans within the assessment object before submission to HITRUST QA.<\/div><input type='hidden' name='question_id[]' id='qID_46' value='431373' \/><input type='hidden' id='answerType431373' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431373[]' id='answer-id-1669296' class='answer   answerof-431373 ' value='1669296'   \/><label for='answer-id-1669296' id='answer-label-1669296' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431373[]' id='answer-id-1669297' class='answer   answerof-431373 ' value='1669297'   \/><label for='answer-id-1669297' id='answer-label-1669297' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-47' style=';'><div id='questionWrap-47'  class='   watupro-question-id-431374'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>47. <\/span>1.An organization has identified a number of components needed for an assessment. These components cover systems\/applications for customers in the states of Massachusetts and Nevada. <br \/>\r<br>Assuming management wants corresponding regulatory factors to be included in their assessment, which regulatory factors would apply? (Select all that apply)<\/div><input type='hidden' name='question_id[]' id='qID_47' value='431374' \/><input type='hidden' id='answerType431374' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431374[]' id='answer-id-1669298' class='answer   answerof-431374 ' value='1669298'   \/><label for='answer-id-1669298' id='answer-label-1669298' class=' answer'><span>State of Massachusetts Data Protection Act<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431374[]' id='answer-id-1669299' class='answer   answerof-431374 ' value='1669299'   \/><label for='answer-id-1669299' id='answer-label-1669299' class=' answer'><span>CMS Minimum Security Requirements (High)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431374[]' id='answer-id-1669300' class='answer   answerof-431374 ' value='1669300'   \/><label for='answer-id-1669300' id='answer-label-1669300' class=' answer'><span>State of Nevada Security of Personal Information Requirements<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431374[]' id='answer-id-1669301' class='answer   answerof-431374 ' value='1669301'   \/><label for='answer-id-1669301' id='answer-label-1669301' class=' answer'><span>Texas Health and Safety Code<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-431374[]' id='answer-id-1669302' class='answer   answerof-431374 ' value='1669302'   \/><label for='answer-id-1669302' id='answer-label-1669302' class=' answer'><span>Subject to De-ID Requirements<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-48' style=';'><div id='questionWrap-48'  class='   watupro-question-id-431375'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>48. <\/span>In an i1 assessment a Control Reference score of 62 would yield which result?<\/div><input type='hidden' name='question_id[]' id='qID_48' value='431375' \/><input type='hidden' id='answerType431375' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431375[]' id='answer-id-1669303' class='answer   answerof-431375 ' value='1669303'   \/><label for='answer-id-1669303' id='answer-label-1669303' class=' answer'><span>An optional CAP for all gaps within the associated Requirement Statements<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431375[]' id='answer-id-1669304' class='answer   answerof-431375 ' value='1669304'   \/><label for='answer-id-1669304' id='answer-label-1669304' class=' answer'><span>A required CAP for all gaps within the associated Requirement Statements<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431375[]' id='answer-id-1669305' class='answer   answerof-431375 ' value='1669305'   \/><label for='answer-id-1669305' id='answer-label-1669305' class=' answer'><span>A HITRUST certification<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431375[]' id='answer-id-1669306' class='answer   answerof-431375 ' value='1669306'   \/><label for='answer-id-1669306' id='answer-label-1669306' class=' answer'><span>A Control Reference gap<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-49' style=';'><div id='questionWrap-49'  class='   watupro-question-id-431376'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>49. <\/span>On an r2 assessment, the decision to require a CAP for a deficiency (gap) is determined at the Control Reference level and the Requirement Statement level.<\/div><input type='hidden' name='question_id[]' id='qID_49' value='431376' \/><input type='hidden' id='answerType431376' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431376[]' id='answer-id-1669307' class='answer   answerof-431376 ' value='1669307'   \/><label for='answer-id-1669307' id='answer-label-1669307' class=' answer'><span>True<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431376[]' id='answer-id-1669308' class='answer   answerof-431376 ' value='1669308'   \/><label for='answer-id-1669308' id='answer-label-1669308' class=' answer'><span>False<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-50' style=';'><div id='questionWrap-50'  class='   watupro-question-id-431377'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>50. <\/span>Where in MyCSF can the CSF framework be browsed?<\/div><input type='hidden' name='question_id[]' id='qID_50' value='431377' \/><input type='hidden' id='answerType431377' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431377[]' id='answer-id-1669309' class='answer   answerof-431377 ' value='1669309'   \/><label for='answer-id-1669309' id='answer-label-1669309' class=' answer'><span>Home<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431377[]' id='answer-id-1669310' class='answer   answerof-431377 ' value='1669310'   \/><label for='answer-id-1669310' id='answer-label-1669310' class=' answer'><span>Tasks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431377[]' id='answer-id-1669311' class='answer   answerof-431377 ' value='1669311'   \/><label for='answer-id-1669311' id='answer-label-1669311' class=' answer'><span>Administration<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431377[]' id='answer-id-1669312' class='answer   answerof-431377 ' value='1669312'   \/><label for='answer-id-1669312' id='answer-label-1669312' class=' answer'><span>Reference Library<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-431377[]' id='answer-id-1669313' class='answer   answerof-431377 ' value='1669313'   \/><label for='answer-id-1669313' id='answer-label-1669313' class=' answer'><span>Search<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-51'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons10947\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"10947\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-04-30 00:18:17\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1777508297\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"431328:1669163,1669164,1669165,1669166,1669167 | 431329:1669168,1669169 | 431330:1669170,1669171,1669172,1669173,1669174,1669175 | 431331:1669176,1669177 | 431332:1669178,1669179 | 431333:1669180,1669181 | 431334:1669182,1669183,1669184,1669185 | 431335:1669186,1669187 | 431336:1669188,1669189,1669190,1669191,1669192 | 431337:1669193,1669194,1669195,1669196,1669197 | 431338:1669198,1669199 | 431339:1669200,1669201,1669202,1669203,1669204 | 431340:1669205,1669206 | 431341:1669207,1669208,1669209,1669210 | 431342:1669211,1669212 | 431343:1669213,1669214,1669215,1669216,1669217 | 431344:1669218,1669219,1669220,1669221 | 431345:1669222,1669223 | 431346:1669224,1669225,1669226,1669227,1669228 | 431347:1669229,1669230 | 431348:1669231,1669232,1669233,1669234 | 431349:1669235,1669236 | 431350:1669237,1669238,1669239,1669240 | 431351:1669241,1669242 | 431352:1669243,1669244 | 431353:1669245,1669246 | 431354:1669247,1669248 | 431355:1669249,1669250 | 431356:1669251,1669252,1669253,1669254 | 431357:1669255,1669256 | 431358:1669257,1669258 | 431359:1669259,1669260,1669261,1669262 | 431360:1669263,1669264 | 431361:1669265,1669266 | 431362:1669267,1669268 | 431363:1669269,1669270 | 431364:1669271,1669272 | 431365:1669273,1669274 | 431366:1669275,1669276,1669277,1669278 | 431367:1669279,1669280,1669281,1669282 | 431368:1669283,1669284 | 431369:1669285,1669286 | 431370:1669287,1669288,1669289 | 431371:1669290,1669291,1669292,1669293 | 431372:1669294,1669295 | 431373:1669296,1669297 | 431374:1669298,1669299,1669300,1669301,1669302 | 431375:1669303,1669304,1669305,1669306 | 431376:1669307,1669308 | 431377:1669309,1669310,1669311,1669312,1669313\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"431328,431329,431330,431331,431332,431333,431334,431335,431336,431337,431338,431339,431340,431341,431342,431343,431344,431345,431346,431347,431348,431349,431350,431351,431352,431353,431354,431355,431356,431357,431358,431359,431360,431361,431362,431363,431364,431365,431366,431367,431368,431369,431370,431371,431372,431373,431374,431375,431376,431377\";\nWatuPROSettings[10947] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 10947;\t    \nWatuPRO.post_id = 112181;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.97037900 1777508297\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(10947);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>You must choose the most updated study materials to prepare for your Certified CSF Practitioner CCSFP Certification exam. DumpsBase offers the CCSFP dumps (V9.02) with 141 practice exam questions and answers, covering all the Certified CSF Practitioner exam topics to provide you with comprehensive information. All these questions and answers have been verified by the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19936,19935],"tags":[20065,20066],"class_list":["post-112181","post","type-post","status-publish","format-standard","hentry","category-csf-practitioner","category-hitrust","tag-ccsfp-exam-questions","tag-certified-csf-practitioner-ccsfp-certification"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/112181","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=112181"}],"version-history":[{"count":2,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/112181\/revisions"}],"predecessor-version":[{"id":112183,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/112181\/revisions\/112183"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=112181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=112181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=112181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}