SSCP · Question #296
What can best be defined as the detailed examination and testing of the security features of an IT system or product to ensure that they work correctly and effectively and do not show any logical…
The correct answer is B. Evaluation. Evaluation is the process of technically examining and testing a system's or product's security features against defined criteria (such as Common Criteria or TCSEC) to confirm they function as intended and contain no logical flaws. Certification (C) is the formal process of…
Question
Options
- AAcceptance testing
- BEvaluation
- CCertification
- DAccreditation
How the community answered
(51 responses)- A8% (4)
- B86% (44)
- C2% (1)
- D4% (2)
Explanation
Evaluation is the process of technically examining and testing a system's or product's security features against defined criteria (such as Common Criteria or TCSEC) to confirm they function as intended and contain no logical flaws. Certification (C) is the formal process of comprehensively assessing an entire system's security posture against a baseline. Accreditation (D) is management's formal authorization to operate a system, based on an accepted level of residual risk. Acceptance testing (A) verifies that a system meets business or functional requirements, not specifically security evaluation criteria.
Topics
Community Discussion
No community discussion yet for this question.