CCSP Exam QuestionsBrowse all questions from this exam

CCSP Exam - Question 469


The application normative framework is best described as which of the following?

Show Answer
Correct Answer: D

The application normative framework (ANF) is a part of the overarching organization normative framework (ONF). Each organization has one ONF that applies broadly, but multiple ANFs tailored for each application within the organization. Therefore, the ANF is a subset of the ONF.

Discussion

5 comments
Sign in to comment
gjjw
Nov 23, 2022

Replace subnet with a subset in the D answer please

Guivent
May 20, 2023

It should be subset

xaccan
Apr 17, 2024

subset *

akg001Option: D
Nov 23, 2024

D. A subnet (Subset) of the ONF

MaciekMTOption: D
Feb 25, 2025

The Application Normative Framework (ANF) is a subset of the Organizational Normative Framework (ONF) that focuses specifically on application security controls, policies, and best practices. It defines application-specific security requirements within the broader ONF. Why Not the Others? A. A superset of the ONF → Incorrect because ONF is the broader framework, while ANF is a part of it. B. A stand-alone framework for storing security practices for the ONF → Incorrect because ANF is not independent; it is derived from ONF. C. The complete ONF → Incorrect because ONF encompasses organization-wide security policies, not just applications.