CSSLP · Question #156
NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?
The correct answer is C. Abbreviated. According to NIST SP 800-53A, "Abbreviated" interviews are characterized by their informal and ad hoc nature, used when a brief or targeted discussion is sufficient for assessment purposes.
Question
NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?
Options
- AComprehensive
- BSignificant
- CAbbreviated
- DSubstantial
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C87% (27)
- D3% (1)
Why each option
According to NIST SP 800-53A, "Abbreviated" interviews are characterized by their informal and ad hoc nature, used when a brief or targeted discussion is sufficient for assessment purposes.
"Comprehensive" interviews, as defined by NIST SP 800-53A, are highly structured and detailed, covering all aspects of a security control or an entire system, which is the opposite of informal and ad hoc.
"Significant" is not a defined type of interview in NIST SP 800-53A.
NIST SP 800-53A, "Guide for Assessing the Security Controls in Federal Information Systems and Organizations," defines "Abbreviated" interviews as informal, ad hoc discussions focused on obtaining specific information or clarifying a particular aspect of a security control, rather than a full, structured review.
"Substantial" is not a defined type of interview in NIST SP 800-53A.
Concept tested: NIST SP 800-53A interview types
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-53Ar1.pdf
Topics
Community Discussion
No community discussion yet for this question.