Study. uk . com
  1. Home
  2. All questions
  3. Question 674

CISM study material · question 674 of 1000

Which three methods does NIST name for collecting security data?

  1. Interview, inspection and testing
  2. Experimentation, observation and sampling
  3. Scanning, logging and alerting
  4. Survey, audit and benchmark
Show the answer

Answer: B. Experimentation, observation and sampling

SP 800-55v1 names experimentation, observation and sampling as ways security data is gathered, and the choice among them bounds what the data can be used to conclude.

Source: NIST SP 800-55 Vol. 1 (NIST) — Sec. 2.1 Measurement and Quantitative Assessment

Challenge yourself on this topic → Study as cards