Study. uk . com
  1. Home
  2. All questions
  3. Question 395

CISSP study material · question 395 of 500

An assessor asks what distinguishes the three assessment methods in SP 800-53A from the objects being assessed. What is the distinction?

  1. Examine, interview and test define the objects, while depth and coverage define the actions.
  2. Examine, interview and test define the nature of the assessor's actions, not what is being looked at.
  3. The methods and the objects are the same thing under different names.
  4. Examine and test define actions, while interview defines an object type.
Show the answer

Answer: B. Examine, interview and test define the nature of the assessor's actions, not what is being looked at.

SP 800-53A says assessment methods define the nature of the assessor actions and include examine, interview and test; assessment objects identify the specific items being assessed.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.4.2 Assessment Methods

Challenge yourself on this topic → Study as cards