Study. uk . com
  1. Home
  2. All questions
  3. Question 925

CISM study material · question 925 of 1000

What distinguishes a test from other plan validation activities in NIST's usage?

  1. It relies on the judgement of an independent observer
  2. It walks participants through the plan in a discussion setting
  3. It uses quantifiable metrics to validate that a system or component works in an operational environment
  4. It is performed only on high-impact systems
Show the answer

Answer: C. It uses quantifiable metrics to validate that a system or component works in an operational environment

SP 800-34r1 defines a test as a validation using quantifiable metrics conducted in an operational environment, giving as examples timing a call tree or removing power from a component.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.5.1 Testing

Challenge yourself on this topic → Study as cards