Discuss ISC2 ISSEP Exam Topic 5 Question 101

Which of the following NIST Special Publication documents provides a guideline on questionnaires and checklists through which systems can be evaluated for compliance against specific control objectives

Suggested Answer: D

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

46 comments · newest first

Carin 10 months ago

NIST SP 800-26 is outdated, right? Why is it even an option?

Melina 10 months ago

I thought it was NIST SP 800-53, but now I'm not so sure.

Melda 10 months ago

I'm pretty sure it's NIST SP 800-53A.

Terrilyn 10 months ago

Wait, isn't NIST SP 800-37 more about risk management?

Susy 10 months ago

Yeah, I agree, that one covers compliance evaluations.

Lenna 11 months ago

I vaguely recall that NIST SP 800-26 was related to security self-assessments, but I can't remember if it fits this question.

Janessa 11 months ago

I feel like NIST SP 800-37 is more about risk management frameworks, so it probably isn't the answer.

Eva 11 months ago

I remember studying NIST SP 800-53 for controls, but I don't think it specifically covers questionnaires.

Carmen 11 months ago

I think NIST SP 800-53A might be the right one since it deals with assessment and evaluation, but I'm not entirely sure.

France 12 months ago

Based on my understanding, NIST SP 800-53A is the document that provides guidance on using questionnaires and checklists to evaluate systems for compliance with security controls. I feel confident that this is the correct answer.

Benedict 12 months ago

I'm a bit confused by the wording of this question. Does it mean which NIST SP document provides the actual questionnaires and checklists, or just guidelines on how to develop them? I'll need to re-read the question carefully before selecting an answer.

Tammara 12 months ago

Okay, let me think this through. NIST SP 800-53 covers the security controls themselves, while 800-37 is about the risk management framework. I'm leaning towards 800-53A as the best answer, since it seems to be focused on the assessment and evaluation process.

Sherrell 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to review the descriptions of the different NIST SP documents to determine which one is most likely to cover questionnaires and checklists for compliance.

Albina 1 year ago

I'm pretty sure the answer is NIST SP 800-53A, since that document provides guidelines on evaluating systems for compliance with security controls.

Lorean 1 year ago

I hope the exam doesn't ask us to recite the entire list of NIST SPs from memory. That would be a real nightmare!

Shawna 1 year ago

↳ replying to Lorean

E) NIST SP 800-59

Brittni 1 year ago

↳ replying to Lorean

C) NIST SP 800-53

Jose 1 year ago

↳ replying to Lorean

A) NIST SP 800-53A

Darrin 1 year ago

I'm not sure, but I think it might be C) NIST SP 800-53.

Coral 1 year ago

I agree with Izetta, because NIST SP 800-53A focuses on evaluation methods.

Maynard 1 year ago

If I had a nickel for every NIST special publication, I'd be able to buy a whole server farm to store them all!

Jacinta 1 year ago

↳ replying to Maynard

F) NIST SP 800-60

Melissa 1 year ago

↳ replying to Maynard

E) NIST SP 800-59

Suzan 1 year ago

↳ replying to Maynard

D) NIST SP 800-26

King 1 year ago

↳ replying to Maynard

C) NIST SP 800-53

Alyssa 1 year ago

↳ replying to Maynard

B) NIST SP 800-37

Shantay 1 year ago

↳ replying to Maynard

A) NIST SP 800-53A

Izetta 1 year ago

I think the answer is A) NIST SP 800-53A.

Amber 1 year ago

Definitely NIST SP 800-53A. That's the one that gives you the checklists and questionnaires to evaluate your system's compliance.

Keneth 1 year ago

↳ replying to Amber

Yes, NIST SP 800-53A provides the guidelines for using questionnaires and checklists to evaluate systems.

Keneth 1 year ago

↳ replying to Amber

I agree, NIST SP 800-53A is the one for evaluating compliance with specific control objectives.

Elliot 1 year ago

Hmm, I'm not sure. NIST SP 800-53 might be a better fit since it covers the controls themselves, but I could be wrong.

Arlette 1 year ago

I'd go with option D, NIST SP 800-26. That one focuses on self-assessments and questionnaires, doesn't it?

Deeann 1 year ago

↳ replying to Arlette

I agree, NIST SP 800-26 is the one to go with for compliance evaluations.

Dulce 1 year ago

↳ replying to Arlette

Great choice! NIST SP 800-26 is the document that provides guidelines on questionnaires and checklists for system evaluations.

Aleshia 1 year ago

↳ replying to Arlette

Yes, you are correct. NIST SP 800-26 focuses on self-assessments and questionnaires.

Dominga 1 year ago

↳ replying to Arlette

F) NIST SP 800-60

Nicolette 1 year ago

↳ replying to Arlette

E) NIST SP 800-59

Walton 1 year ago

↳ replying to Arlette

D) NIST SP 800-26

Kanisha 1 year ago

↳ replying to Arlette

C) NIST SP 800-53

Ronna 1 year ago

↳ replying to Arlette

B) NIST SP 800-37

Dawne 1 year ago

↳ replying to Arlette

A) NIST SP 800-53A

Ollie 1 year ago

NIST SP 800-53A seems like the right choice here. It provides guidance on how to assess controls and determine compliance.

Jovita 1 year ago

↳ replying to Ollie

Yes, NIST SP 800-53A is the document that focuses on questionnaires and checklists for compliance evaluation.

Gwenn 1 year ago

↳ replying to Ollie

I agree, NIST SP 800-53A provides guidelines for assessing controls against specific objectives.

Tijuana 1 year ago

↳ replying to Ollie

I think NIST SP 800-53A is the correct choice for evaluating compliance.

ISC2 ISSEP Exam - Topic 5 Question 101 Discussion