nerdexam
(ISC)2

CGRC · Question #710

What type of testing is the Evaluation thru operation, movement, or adjustment under specific conditions to determine control success? Response:

The correct answer is A. Demonstration. The evaluation of a security control by observing its active use, movement, or adjustment under specific conditions to determine its success is known as a Demonstration.

Assessment/Audit of Security and Privacy Controls

Question

What type of testing is the Evaluation thru operation, movement, or adjustment under specific conditions to determine control success? Response:

Options

  • ADemonstration
  • BInspection
  • CExamination
  • DOrganization

How the community answered

(39 responses)
  • A
    90% (35)
  • B
    3% (1)
  • C
    3% (1)
  • D
    5% (2)

Why each option

The evaluation of a security control by observing its active use, movement, or adjustment under specific conditions to determine its success is known as a Demonstration.

ADemonstrationCorrect

Demonstration, as a control assessment method, involves actively observing the security control in operation, movement, or adjustment under specified conditions. This method directly shows whether a control performs its intended function effectively.

BInspection

Inspection involves examining documents, records, or logs, not directly observing the operational behavior of a control.

CExamination

Examination is often used interchangeably with inspection and refers to reviewing artifacts or documentation, rather than dynamic observation of an operational control.

DOrganization

Organization is not a recognized or standard type of control assessment method.

Concept tested: Control assessment methods (Demonstration)

Source: https://csrc.nist.gov/publications/detail/sp/800-53a/rev5/final

Topics

#Control Testing Methods#Demonstration#Control Assessment#Effectiveness Testing

Community Discussion

No community discussion yet for this question.

Full CGRC Practice