nerdexam
(ISC)2

CGRC · Question #631

Which of the following NIST Special Publication documents provides a guideline on network security testing? Response:

The correct answer is C. NIST SP 800 42. NIST Special Publication 800-42 provides guidelines specifically for network security testing. This document offers comprehensive guidance on methodologies and practices for assessing network vulnerabilities.

Assessment/Audit of Security and Privacy Controls

Question

Which of the following NIST Special Publication documents provides a guideline on network security testing? Response:

Options

  • ANIST SP 800 53A
  • BNIST SP 800 53
  • CNIST SP 800 42
  • DNIST SP 800 37

How the community answered

(30 responses)
  • A
    3% (1)
  • C
    90% (27)
  • D
    7% (2)

Why each option

NIST Special Publication 800-42 provides guidelines specifically for network security testing. This document offers comprehensive guidance on methodologies and practices for assessing network vulnerabilities.

ANIST SP 800 53A

NIST SP 800-53A provides guidelines for assessing the security and privacy controls of federal information systems, not specific methodologies for network security testing.

BNIST SP 800 53

NIST SP 800-53 provides a catalog of security and privacy controls for federal information systems, rather than guidelines on how to perform network security testing.

CNIST SP 800 42Correct

NIST SP 800-42 is titled 'Guideline on Network Security Testing' and directly provides comprehensive guidance on performing security testing for computer networks. This publication outlines various testing methodologies, tools, and best practices to identify vulnerabilities and weaknesses within network security architectures.

DNIST SP 800 37

NIST SP 800-37 outlines the Risk Management Framework (RMF), which is a process for managing security and privacy risk, not a specific guideline on network security testing.

Concept tested: NIST publications for network security testing

Source: https://csrc.nist.gov/publications/detail/sp/800-42/archive/2003-11-01

Topics

#NIST Special Publications#Network Security Testing#Security Guidelines

Community Discussion

No community discussion yet for this question.

Full CGRC Practice