nerdexam
(ISC)2

SSCP · Question #227

Which of the following is the act of performing tests and evaluations to test a system's security level to see if it complies with the design specifications and security requirements?

The correct answer is B. Verification. Verification is the process of testing and evaluating a system to confirm it complies with its design specifications and stated security requirements - essentially asking 'are we building the system right?' Validation (A), by contrast, asks 'are we building the right system?'…

Submitted by deeparc· Apr 18, 2026Systems and Application Security

Question

Which of the following is the act of performing tests and evaluations to test a system's security level to see if it complies with the design specifications and security requirements?

Options

  • AValidation
  • BVerification
  • CAssessment
  • DAccuracy

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    93% (26)
  • C
    4% (1)

Explanation

Verification is the process of testing and evaluating a system to confirm it complies with its design specifications and stated security requirements - essentially asking 'are we building the system right?' Validation (A), by contrast, asks 'are we building the right system?' and checks whether the system meets user needs or business requirements. Assessment (C) is a broader evaluation of risk or posture, and Accuracy (D) is a data quality attribute, not a security process.

Topics

#Verification#Security testing#Compliance testing#SDLC security

Community Discussion

No community discussion yet for this question.

Full SSCP Practice