Study. uk . com
  1. Home
  2. All questions
  3. Question 396

CISSP study material · question 396 of 500

Which four kinds of assessment object does SP 800-53A define?

  1. Controls, enhancements, parameters and baselines.
  2. Policies, procedures, standards and guidelines.
  3. Specifications, mechanisms, activities and individuals.
  4. Hosts, networks, applications and facilities.
Show the answer

Answer: C. Specifications, mechanisms, activities and individuals.

SP 800-53A defines assessment objects as specifications, which are document-based artefacts; mechanisms, which are hardware, software or firmware safeguards; activities, which are protection-related actions; and individuals.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.4.1 Assessment Objects

Challenge yourself on this topic → Study as cards