Study. uk . com
  1. Home
  2. All questions
  3. Question 406

CISSP study material · question 406 of 500

A product is deployed in millions of systems worldwide. What does SP 800-53A observe about assessing the product itself rather than each deployment?

  1. Product assessments are less rigorous, since they cannot see the operating environment.
  2. Product assessments can be carried out at greater depth and give deeper insight into its capabilities.
  3. Product assessments cover coverage but never depth.
  4. Product assessments are unnecessary once one deployment has been assessed.
Show the answer

Answer: B. Product assessments can be carried out at greater depth and give deeper insight into its capabilities.

Where a product is later deployed in millions of systems, assessing the product itself can go far deeper and reveal more than assessing one deployment.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.3 Building an Effective Assurance Case

Challenge yourself on this topic → Study as cards