Study. uk . com
  1. Home
  2. All questions
  3. Question 928

CISM study material · question 928 of 1000

Which scenario does NIST accept for a contingency test, and what quality does it require of it?

  1. A scenario drawn at random from the entries that are currently held in the organisation's risk register
  2. Either the worst case or the most likely incident, mimicking reality as closely as possible
  3. Only the worst case that can be imagined, so that the limits of the plan itself are found and then properly recorded
  4. Only the incident judged to be the most likely one, so that the results obtained are representative ones
Show the answer

Answer: B. Either the worst case or the most likely incident, mimicking reality as closely as possible

SP 800-34r1 accepts either the worst case or the incident judged most likely as a test scenario, asking only that it stay as close to reality as it can.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.5.1 Testing

Challenge yourself on this topic → Study as cards