CISSP-ISSEP · Question #43
Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completeness of the relations
The correct answer is C. Traceability matrix. A traceability matrix (C) is exactly this artifact - a table mapping relationships between two sets of documents (such as requirements to test cases, or controls to policies) to verify completeness and coverage in a many-to-many fashion. The distractors are all NIST/FIPS standard
Question
Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completeness of the relationship?
Options
- AFIPS 200
- BNIST SP 800-50
- CTraceability matrix
- DFIPS 199
How the community answered
(38 responses)- B3% (1)
- C95% (36)
- D3% (1)
Explanation
A traceability matrix (C) is exactly this artifact - a table mapping relationships between two sets of documents (such as requirements to test cases, or controls to policies) to verify completeness and coverage in a many-to-many fashion. The distractors are all NIST/FIPS standards, not document types: FIPS 200 establishes minimum security requirements for federal information systems, FIPS 199 defines standards for categorizing federal information and information systems by impact level, and NIST SP 800-50 covers building an IT security awareness and training program - none of them describe a relational mapping document.
Memory tip: Think "trace the connections" - a traceability matrix lets you trace whether every item in document A maps to at least one item in document B and vice versa, like a grid where you check off each intersection.
Topics
Community Discussion
No community discussion yet for this question.