nerdexam
(ISC)2

SSCP · Question #296

What can best be defined as the detailed examination and testing of the security features of an IT system or product to ensure that they work correctly and effectively and do not show any logical…

The correct answer is B. Evaluation. Evaluation is the process of technically examining and testing a system's or product's security features against defined criteria (such as Common Criteria or TCSEC) to confirm they function as intended and contain no logical flaws. Certification (C) is the formal process of…

Submitted by kim_seoul· Apr 18, 2026Systems and Application Security

Question

What can best be defined as the detailed examination and testing of the security features of an IT system or product to ensure that they work correctly and effectively and do not show any logical vulnerabilities, such as evaluation criteria?

Options

  • AAcceptance testing
  • BEvaluation
  • CCertification
  • DAccreditation

How the community answered

(51 responses)
  • A
    8% (4)
  • B
    86% (44)
  • C
    2% (1)
  • D
    4% (2)

Explanation

Evaluation is the process of technically examining and testing a system's or product's security features against defined criteria (such as Common Criteria or TCSEC) to confirm they function as intended and contain no logical flaws. Certification (C) is the formal process of comprehensively assessing an entire system's security posture against a baseline. Accreditation (D) is management's formal authorization to operate a system, based on an accepted level of residual risk. Acceptance testing (A) verifies that a system meets business or functional requirements, not specifically security evaluation criteria.

Topics

#Security Evaluation#System Security Testing#Security Assurance#Common Criteria

Community Discussion

No community discussion yet for this question.

Full SSCP Practice