Exam 712-50 topic 1 question 99 discussion

"Best practice" is not a requirement, it's a guideline. A framework contains requirements in order to meet compliance under that framework

Is the answer C because it uses the phrase "required by?"

A. Industry best practices

Correct answer A. Industry best practices The patching and monitoring of systems on a consistent schedule is required by industry best practices. Industry standards and guidelines, such as those provided by organizations like the National Institute of Standards and Technology (NIST), the Center for Internet Security (CIS), and the International Organization for Standardization (ISO), emphasize the importance of regular patching and monitoring as fundamental security practices