Study. uk . com
  1. Home
  2. All questions
  3. Question 366

CISSP study material · question 366 of 500

Into which three families does SP 800-115 sort its technical assessment techniques?

  1. Preventive; detective; corrective techniques.
  2. Black box; grey box; white box techniques.
  3. Review techniques; target identification and analysis techniques; target vulnerability validation techniques.
  4. Passive techniques; active techniques; destructive techniques.
Show the answer

Answer: C. Review techniques; target identification and analysis techniques; target vulnerability validation techniques.

SP 800-115 groups the commonly used techniques into review techniques, target identification and analysis techniques, and target vulnerability validation techniques.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.2 Technical Assessment Techniques

Challenge yourself on this topic → Study as cards