Certified Information Systems Security Professional (CISSP) — Question 12

What is the PRIMARY benefit of relying on Security Content Automation Protocol (SCAP)?

Answer options

• A. Standardize specifications between software security products.
• B. Achieve organizational compliance with international standards.
• C. Improve vulnerability assessment capabilities.
• D. Save security costs for the organization.

Correct answer: C

Explanation

The primary benefit of SCAP is that it enhances vulnerability assessment capabilities by providing a standardized way to evaluate security vulnerabilities. While standardizing specifications and achieving compliance are important, they are secondary to the core function of improving how vulnerabilities are assessed. Saving costs is a potential outcome but not a primary benefit of using SCAP.