Certified Cloud Security Professional (CCSP) — Question 36

The application normative framework is best described as which of the following?

Answer options

• A. A superset of the ONF
• B. A stand-alone framework for storing security practices for the ONF
• C. The complete ONF
• D. A subnet of the ONF

Correct answer: D

Explanation

The application normative framework is considered a subnet of the ONF because it focuses on a specific aspect within the broader ONF. Options A, B, and C misrepresent its scope by suggesting it is either broader or independent, which is not accurate.