CGRC · Question #118
All of the following except one are assessment objects. Response:
The correct answer is B. Examine. The question asks to identify which item among the choices is NOT an assessment object within a security assessment context.
Question
All of the following except one are assessment objects. Response:
Options
- ASpecifications
- BExamine
- CActivities and individuals
- DMechanisms
How the community answered
(41 responses)- A2% (1)
- B88% (36)
- C2% (1)
- D7% (3)
Why each option
The question asks to identify which item among the choices is NOT an assessment object within a security assessment context.
Specifications (e.g., system requirements, design documents) are valid assessment objects.
'Examine' is an assessment method or technique, indicating an action performed (e.g., examining documentation), rather than an object being assessed. Assessment objects are the tangible or conceptual items upon which the assessment methods are applied.
Activities and individuals (e.g., security processes, personnel performing tasks) are valid assessment objects.
Mechanisms (e.g., security controls, technical components) are valid assessment objects.
Concept tested: NIST SP 800-53A assessment objects and methods
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53Ar5.pdf
Topics
Community Discussion
No community discussion yet for this question.