Study. uk . com
  1. Home
  2. All questions
  3. Question 398

CISSP study material · question 398 of 500

Two assessments examine the same control. One inspects three sample servers very thoroughly; the other inspects fifty servers superficially. Which attributes does SP 800-53A use to describe this difference?

  1. Depth for rigour, detail and formality; coverage for scope and breadth of objects examined.
  2. Method for rigour; object for breadth.
  3. Assurance for rigour; sampling for breadth.
  4. Frequency for rigour; population for breadth.
Show the answer

Answer: A. Depth for rigour, detail and formality; coverage for scope and breadth of objects examined.

SP 800-53A associates depth with the rigour, level of detail and formality of the assessment, and coverage with the scope and breadth of assessment objects included.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.3 Building an Effective Assurance Case

Challenge yourself on this topic → Study as cards