nerdexam
(ISC)2

CISSP-ISSEP · Question #82

NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?

The correct answer is A. Abbreviated. Abbreviated interviews in NIST SP 800-53A are the least rigorous tier, characterized by informal, ad hoc discussions rather than structured questioning - making A correct. This level is appropriate for lower-impact systems where a light-touch review suffices. Significant (B) is…

Governance and Training

Question

NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?

Options

  • AAbbreviated
  • BSignificant
  • CSubstantial
  • DComprehensive

How the community answered

(17 responses)
  • A
    94% (16)
  • C
    6% (1)

Explanation

Abbreviated interviews in NIST SP 800-53A are the least rigorous tier, characterized by informal, ad hoc discussions rather than structured questioning - making A correct. This level is appropriate for lower-impact systems where a light-touch review suffices.

Significant (B) is a fabricated distractor - NIST SP 800-53A does not define an interview type by that name, making it an easy trap if you're guessing from intuition rather than knowledge. Substantial (C) is a real NIST SP 800-53A tier but involves broader, more structured interviews suited to moderate-impact systems. Comprehensive (D) is also real but represents the most thorough, in-depth interview tier, used for high-impact systems requiring rigorous scrutiny.

Memory tip: Think "Abbreviated = Abridged = Ad hoc" - all three share the concept of less formality and reduced scope. If you can remember that abbreviated means cut short, you'll naturally associate it with informal, unstructured interviews.

Topics

#NIST SP 800-53A#Security Assessment#Interview Techniques#Assessment Methods

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice