On which counts does SP 800-53A judge the strength of a component's security functionality? Choose three.

Answer: A. Whether the functionality is correct and complete.
D. Whether it resists direct attack.
C. Whether it resists bypass or tampering.

SP 800-53A determines security strength by the degree to which functionality is correct, complete, resistant to direct attack, and resistant to bypass or tampering.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.3 footnote 19