nerdexam
(ISC)2

CAP · Question #208

Which of the following assessment methods involves observing or conducting the operation of physical devices?

The correct answer is D. Testing. Testing is the assessment method that involves directly exercising or operating mechanisms, including physical devices, to verify they function as intended. According to NIST SP 800-53A, the three primary assessment methods are interview (discussions with personnel), examination

Assessment/Audit of Security and Privacy Controls

Question

Which of the following assessment methods involves observing or conducting the operation of physical devices?

Options

  • AInterview
  • BDeviation
  • CExamination
  • DTesting

How the community answered

(44 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    2% (1)
  • D
    89% (39)

Explanation

Testing is the assessment method that involves directly exercising or operating mechanisms, including physical devices, to verify they function as intended. According to NIST SP 800-53A, the three primary assessment methods are interview (discussions with personnel), examination (reviewing documents, configurations, logs), and testing (executing or operating controls). Testing is the hands-on, operational method-running a device, executing a procedure, or triggering a mechanism to observe its actual behavior.

Topics

#Assessment methods#Control testing#Physical security assessment#Security control verification

Community Discussion

No community discussion yet for this question.

Full CAP Practice