nerdexam
(ISC)2

CGRC · Question #171

Which Certification Level of Effort is indicated by exercise-based and independent assessments? Response:

The correct answer is A. High. Exercise-based and independent assessments are highly resource-intensive and demand significant expertise, thus indicating a high level of effort for security certification processes.

Assessment/Audit of Security and Privacy Controls

Question

Which Certification Level of Effort is indicated by exercise-based and independent assessments? Response:

Options

  • AHigh
  • BLow
  • CModerate
  • DMedium

How the community answered

(26 responses)
  • A
    85% (22)
  • B
    8% (2)
  • C
    4% (1)
  • D
    4% (1)

Why each option

Exercise-based and independent assessments are highly resource-intensive and demand significant expertise, thus indicating a high level of effort for security certification processes.

AHighCorrect

Exercise-based assessments involve dynamic simulations of real-world threats, requiring extensive planning, execution, and specialized personnel. Independent assessments, typically conducted by external entities, demand rigorous and unbiased evaluations, both contributing to a high level of effort due to their comprehensive nature and depth of scrutiny.

BLow

Low levels of effort are associated with simpler assessment methods, not comprehensive exercise-based or independent evaluations.

CModerate

Moderate levels of effort typically involve more basic testing and documentation reviews, falling short of the rigor required for exercise-based assessments.

DMedium

Medium levels of effort are not sufficiently comprehensive to cover the extensive scope and resources needed for exercise-based and independent assessments.

Concept tested: Certification assessment effort levels

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53A-rev5.pdf

Topics

#Assessment methodologies#Independent assessments#Exercise-based assessments#Certification effort

Community Discussion

No community discussion yet for this question.

Full CGRC Practice