Storage configuration items should show automated pass/fail for encryption at rest without waiting for a manual tester. What should be set up?
Select an answer to reveal the explanation.
Short Explanation
Let the platform watch the lock instead of polling people. Use an indicator that evaluates encryption-at-rest on those storage CIs. Quarterly maybe-surveys, free-text CMDB notes, and permanent Passed stamps are not continuous monitoring.
Full Explanation
Indicator-based control evaluation uses automated signals to assess control health on entities or configuration items without waiting solely for manual testers. Setting up indicator-based evaluation for encryption at rest on storage CIs lets civic storage platforms show continuous pass/fail aligned to Policy and Compliance. Creating a manual survey emailed quarterly asking whether encryption might be enabled fails by concept because periodic opinion surveys are not automated indicators and invite stale or inaccurate status. Storing encryption status only in a CMDB free-text comment with no control linkage fails by concept because unlinked comments do not evaluate controls or feed compliance dashboards. Marking every storage control permanently Passed to avoid indicator configuration fails by concept because forced permanent pass falsifies assurance and defeats continuous evaluation. Exam caveat: CIS-RC distinguishes automated control indicators from surveys, free-text CMDB notes, and hard-coded pass states. Operational check: configure an encryption-at-rest indicator against storage CIs, relate it to the control, flip a test CI’s encryption attribute, and confirm the indicator and control evaluation update accordingly.