nerdexam
(ISC)2

CAP · Question #401

Which of the following assessment methods is used to review, inspect, and analyze assessment objects?

The correct answer is B. Examination. Examination is the formal NIST-defined assessment method that involves reviewing, inspecting, and analyzing assessment objects, records, and documentation.

Assessment/Audit of Security and Privacy Controls

Question

Which of the following assessment methods is used to review, inspect, and analyze assessment objects?

Options

  • ATesting
  • BExamination
  • CInterview
  • DDebugging

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    89% (42)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Examination is the formal NIST-defined assessment method that involves reviewing, inspecting, and analyzing assessment objects, records, and documentation.

ATesting

Testing involves exercising an assessment object under specified conditions to compare actual versus expected behavior, not passive review or inspection.

BExaminationCorrect

According to NIST SP 800-53A, Examination is defined as the process of checking, inspecting, reviewing, observing, studying, or analyzing assessment objects to facilitate understanding and achieve clarification. It is specifically distinguished from Testing, which exercises objects under conditions, and Interviewing, which involves human discussion. Examination applies to documents, mechanisms, and activities without active execution.

CInterview

Interviewing is the process of conducting discussions with individuals to facilitate understanding and gather information, not analyzing or inspecting objects.

DDebugging

Debugging is a software development technique for identifying and removing code defects and is not a recognized formal security assessment method.

Concept tested: NIST assessment methods - examination vs testing vs interview

Source: https://csrc.nist.gov/publications/detail/sp/800-53a/rev-5/final

Topics

#Assessment methods#Security assessment#Examination#Control assessment

Community Discussion

No community discussion yet for this question.

Full CAP Practice