CAP · Question #401
Which of the following assessment methods is used to review, inspect, and analyze assessment objects?
The correct answer is B. Examination. Examination is the formal NIST-defined assessment method that involves reviewing, inspecting, and analyzing assessment objects, records, and documentation.
Question
Which of the following assessment methods is used to review, inspect, and analyze assessment objects?
Options
- ATesting
- BExamination
- CInterview
- DDebugging
How the community answered
(47 responses)- A6% (3)
- B89% (42)
- C2% (1)
- D2% (1)
Why each option
Examination is the formal NIST-defined assessment method that involves reviewing, inspecting, and analyzing assessment objects, records, and documentation.
Testing involves exercising an assessment object under specified conditions to compare actual versus expected behavior, not passive review or inspection.
According to NIST SP 800-53A, Examination is defined as the process of checking, inspecting, reviewing, observing, studying, or analyzing assessment objects to facilitate understanding and achieve clarification. It is specifically distinguished from Testing, which exercises objects under conditions, and Interviewing, which involves human discussion. Examination applies to documents, mechanisms, and activities without active execution.
Interviewing is the process of conducting discussions with individuals to facilitate understanding and gather information, not analyzing or inspecting objects.
Debugging is a software development technique for identifying and removing code defects and is not a recognized formal security assessment method.
Concept tested: NIST assessment methods - examination vs testing vs interview
Source: https://csrc.nist.gov/publications/detail/sp/800-53a/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.