Study. uk . com
  1. Home
  2. All questions
  3. Question 367

CISSP study material · question 367 of 500

Which activities does SP 800-115 count among review techniques? Choose three.

  1. Password cracking and social engineering.
  2. Documentation and log review.
  3. Network sniffing and file integrity checking.
  4. Ruleset and system configuration review.
Show the answer

Answer: D. Ruleset and system configuration review.
C. Network sniffing and file integrity checking.
B. Documentation and log review.

Review techniques cover documentation, log, ruleset and system configuration review, network sniffing and file integrity checking. Password cracking and social engineering are validation techniques.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.2 Technical Assessment Techniques

Challenge yourself on this topic → Study as cards