Match the third-party assessment body to its niche as SP 800-53A describes them. Which pairings are correct? Choose three.

Answer: C. Common Criteria testing laboratories evaluate information technology products.
A. Cryptographic and security testing laboratories test modules against FIPS 140-3.
D. Third-party assessment organisations assess cloud services for the federal authorisation programme.

SP 800-53A gives third-party organisations assessing cloud services for the federal programme, Common Criteria testing laboratories evaluating products, and cryptographic testing laboratories testing modules against FIPS 140-3.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.3 footnote 20