@fedoracore123 wrote:
Mike Chappell is giving a different answer...
This is an opportunity to understand how a CISSP would analyze this disconnect.
Mike Chappell, CISSP, is a well known author who wrote the "official study guide". He is employed by Notre Dame University, teaching grad-level cybersecurity. One generally would accept answers he gives to security topics.
Andrea Moore, on the other hand does not hold any certificates (to my knowledge), and does not profess to be a security expert. Her relevant claim-to-fame is being an (ISC)² employee who is charged with managing the community.
With respect to (ISC)² policies, I would pick Andrea's answer over Mikes every time. She is an (ISC)² employee, so in the domain of "(ISC)² policies", her words carry a much stronger weight than a CISSP -- even one of Mike's caliber. Further, Andrea cited an official source, whereas Mike restated in his own words (presumably). And, Andrea's response was current at the time of answering the question whereas Mike was current as of the time that the book was printed.
As a CISSP, when faced with multiple different answers, the job is to pick the best one, not just the first one that is "close enough".
... with apologies to Andrea and/or Mike if I offended.
