Exam SY0-601 topic 1 question 51 discussion

Both ISO and NIST have Frameworks for standards. when searching parts of the question "sets frameworks and controls for optimal security configuration" only NIST came up specifically. I personally hate these type of questions as I would utilize both to build from.

NIST I guess

besides the word framework and not standard to differentiate between NIST and ISO; when it comes to security configuration on systems specifically, NIST is often more directly associated with detailed guidelines and controls. NIST's Special Publication 800-53 (which is mentioned in the official study guide), for example, provides a comprehensive catalog of security controls for federal information systems and organizations. So, ISO addresses broader aspects of information security, but NIST is often considered more focused on providing detailed security configurations and controls

NIST is USA specific if the question dosen't specify how are we supposed to know guess?

Once mentioned security that’s should be recon it’s NIST

NIST (National Institute of Standards and Technology) is the organization that sets frameworks and controls for optimal security configuration on systems. NIST is a non-regulatory agency of the United States Department of Commerce and plays a significant role in developing standards and guidelines for various aspects of information security, including cybersecurity best practices and security configuration.

I think ist nist

The organization that sets frameworks and controls for optimal security configuration on systems is NIST (National Institute of Standards and Technology). NIST provides guidelines, standards, and best practices for various aspects of cybersecurity, including security configuration management. Their publications, such as the NIST Special Publication 800-53, provide detailed controls and recommendations for securing information systems and protecting sensitive data. ISO (International Organization for Standardization) develops and publishes international standards for various industries, including cybersecurity, but it does not specifically focus on security configuration management.

Very vague question for such broad reaching organizations. I went with D- NIST, but ISO seemed very likely as well.

National versus international. Some frameworks are used within a single country (and referred to as national frameworks), while others are used internationally. As an example, NIST created the Cybersecurity Framework, which focuses on cybersecurity activities and risks within the United States. In contrast, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) create and publish international standards. For example, ISO/IEC 27002 provides a framework for IT security. Source: Darill Gibson, ComptiaSecurity+ SY0-501 Study Guide, page: 690

https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/security-frameworks/ NIST answer would be D

D. NIST (National Institute of Standards and Technology) sets frameworks and controls for optimal security configuration on systems. NIST provides guidelines, standards, and best practices for information security, including the development of security configuration baselines for various technologies, such as operating systems and applications.

D. NIST ( National Institute of Standards and Technology) is the standard used by organizations to establish fundamental controls and processes needed for optimum cybersecurity

National Institute of Standards and Technology

https://sopa.tulane.edu/blog/NIST-cybersecurity-framework#:~:text=The%20National%20Institute%20of%20Standards,and%20how%20it%20is%20implemented.

The quality of this question is quite low...

ISO is for all standards, not only security, whereas NIST is only related to security.