Which of the following are the types of assessment tests addressed in NIST SP 800-53A?

The correct answer is D. Functional, structural, penetration. NIST SP 800-53A defines three types of assessment tests used to evaluate security controls: (1) Functional testing - verifies that a control operates correctly and produces the intended outcome; (2) Structural testing - examines the internal logic, code, or architecture of the…

Assessment/Audit of Security and Privacy Controls

Question

Options

AFunctional, penetration, validation
BValidation, evaluation, penetration
CValidation, penetration, evaluation
DFunctional, structural, penetration

How the community answered

(55 responses)

A
2% (1)
B
2% (1)
C
5% (3)
D
91% (50)

Explanation

NIST SP 800-53A defines three types of assessment tests used to evaluate security controls: (1) Functional testing - verifies that a control operates correctly and produces the intended outcome; (2) Structural testing - examines the internal logic, code, or architecture of the control mechanism to ensure it is correctly designed; and (3) Penetration testing - simulates adversarial attacks to determine whether controls can withstand real-world exploitation attempts. 'Validation' and 'evaluation' are not the terms used in SP 800-53A for these test categories.

Topics

#NIST SP 800-53A#Control Assessment#Assessment Methods#Penetration Testing

Community Discussion

No community discussion yet for this question.

Full CAP Practice