Study. uk . com
  1. Home
  2. All questions
  3. Question 54

CISSP study material · question 54 of 500

An assessment team at a logistics firm has finished a hands-on technical test of the order platform and proposes to drop the document and configuration review to save budget. The chief information security officer resists. Which two statements support keeping the examination work? Choose two.

  1. Examination gauges how readily an attacker could exploit a weakness more accurately than hands-on testing does
  2. Examination replaces hands-on testing once the system owner has signed off the configuration baselines
  3. Examination is comparatively effective at revealing weak policy and misconfiguration that narrow-scope testing overlooks
  4. Examination touches documents, logs and rulesets passively, so it seldom disturbs live operations
Show the answer

Answer: C. Examination is comparatively effective at revealing weak policy and misconfiguration that narrow-scope testing overlooks
D. Examination touches documents, logs and rulesets passively, so it seldom disturbs live operations

Examination is passive and surfaces policy and configuration weaknesses that testing misses; exploitability is judged better by hands-on testing, so the techniques complement rather than replace each other.

Source: NIST SP 800-115 (NIST) — SP 800-115 > Section 2.3, Comparing Tests and Examinations

Challenge yourself on this topic → Study as cards