A significant action has a state that enables actions on an ADP system to be traced to individuals
who may then be held responsible. The action does NOT include:
A.
Violations of security policy.
B.
Attempted violations of security policy.
C.
Non-violations of security policy.
D.
Attempted violations of allowed actions.
Explanation:
Significant action: The quality or state that enables actions on an ADP system to be traced to
individuals who may then be held responsible. These actions include violations and attempted
violations of the security policy, as well as allowed actions.
The answer should be C.
On other similar websites dealing with CISSP questions the answer should be C
Judging by the Explanation on page:
Significant action: The quality or state that enables actions on an ADP system to be traced to
individuals who may then be held responsible. These actions include violations and attempted
violations of the security policy, as well as allowed actions.
—
C (not D)