20+ practice questions focused on Control Selection — one of the most tested topics on the (ISC)2 Certified in Governance, Risk and Compliance (CGRC) (CGRC) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Control Selection PracticeWhich of the following is the first step in the RMF that involves the selection of security controls?
Explanation: The Select step is the third step in the Risk Management Framework (RMF).
When selecting controls, you notice that a specific NIST 800-53 control includes 'assignment' statements. What is the purpose of these statements?
Explanation: Assignment statements provide a mechanism to tailor the control by specifying organization-defined values or frequencies.
An organization is applying NIST SP 800-53 Rev. 5 controls to a cloud-based SaaS application. The authorization official requests that you perform 'supplementing' during the tailoring process. What is the correct action?
Explanation: Supplementing is the process of adding controls to a baseline to address specific mission or business requirements that are not covered by the standard baseline.
A system owner determines that a specific NIST 800-53 control cannot be implemented due to legacy hardware constraints. They choose to implement a different control to mitigate the same risk. This is an example of what?
Explanation: A compensating control is an alternate measure used to satisfy the requirement of a security control that cannot be implemented as stated.
When utilizing the NIST 800-53 control catalog, which field identifies the specific family to which a control belongs?
Explanation: Control identifiers in NIST 800-53 follow a format such as AC-2, where 'AC' refers to the Access Control family.
+15 more Control Selection questions available
Practice all Control Selection questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Control Selection. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Control Selection questions on the CGRC frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Control Selection is tested as part of the (ISC)2 Certified in Governance, Risk and Compliance (CGRC) (CGRC) blueprint. Practicing with targeted Control Selection questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free CGRC practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Control Selection is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Control Selection practice session with instant scoring and detailed explanations.
Start Control Selection Practice →