Study. uk . com
  1. Home
  2. All questions
  3. Question 372

CISSP study material · question 372 of 500

A scoping discussion asks how much operational disruption the organisation will accept from testing. What does SP 800-115 advise?

  1. Decide the acceptable level of intrusiveness in advance, and exclude tests known to create denial of service or other disruption.
  2. Refuse all techniques that interact directly with production systems.
  3. Accept any level of disruption, since attackers are similarly unconstrained.
  4. Defer the decision to the assessment team, which judges impact at run time.
Show the answer

Answer: A. Decide the acceptable level of intrusiveness in advance, and exclude tests known to create denial of service or other disruption.

SP 800-115 says organisations should determine their acceptable levels of intrusiveness when choosing techniques, and that excluding tests known to cause disruption reduces negative impacts.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.3 Comparing Tests and Examinations

Challenge yourself on this topic → Study as cards