CGRC · Question #172
What type of testing is a Physical review or examination of control such as review of the security setting or software version number? Response:
The correct answer is A. Inspection. A physical review or examination of security controls, such as checking settings or software versions, is categorized as an inspection in the context of security control assessments.
Question
What type of testing is a Physical review or examination of control such as review of the security setting or software version number? Response:
Options
- AInspection
- BDemonstration
- CExamination
- DOrganization
How the community answered
(37 responses)- A89% (33)
- B3% (1)
- C5% (2)
- D3% (1)
Why each option
A physical review or examination of security controls, such as checking settings or software versions, is categorized as an inspection in the context of security control assessments.
Inspection, as an assessment method, involves a physical or logical examination of specific components, configurations, or documentation. Reviewing security settings or software version numbers directly aligns with this method, where evidence is observed and verified without dynamic interaction.
Demonstration involves observing a control in operation during an event or activity, which differs from a static review of settings.
Examination is a broader term, but in specific security control assessment methodologies like NIST, 'Inspection' is the precise term for reviewing static evidence.
Organization refers to the entity performing the assessment or the structure, not a type of security control testing method.
Concept tested: Security control assessment methods - Inspection
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53A-rev5.pdf
Topics
Community Discussion
No community discussion yet for this question.