You are the project manager of QSL project for your organization. You are working you're your project team and several key stakeholders to create a diagram that shows how various elements of a system interrelate and the mechanism of causation within the system. What diagramming technique are you using as a part of the risk identification process?

Predecessor and successor diagramming

Which of the following statements about role-based access control (RBAC) model is true?

In this model, a user can access resources according to his role in the organization.

In this model, the permissions are uniquely assigned to each user account.

In this model, a user can access resources according to his role in the organization.

In this model, the same permission is assigned to each user account.

In this model, the users can access resources according to their seniority.

Certification and Accreditation (C&A or CnA) is a process for implementing information security. Which of the following is the correct order of C&A phases in aDITSCAP assessment?

Definition, Verification, Validation, and Post Accreditation

Definition, Validation, Verification, and Post Accreditation

Verification, Definition, Validation, and Post Accreditation

Definition, Verification, Validation, and Post Accreditation

Verification, Validation, Definition, and Post Accreditation

Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

The data custodian implements the information classification scheme after the initial assignment by the data owner.

The custodian implements the information classification scheme after the initial assignment by the operations manager.

The data custodian implements the information classification scheme after the initial assignment by the data owner.

The data owner implements the information classification scheme after the initial assignment by the custodian.

The custodian makes the initial information classification assignments, and the operations manager implements the scheme.

What does RTM stand for?

Requirements Traceability Matrix

Which of the following statements is true about the continuous monitoring process?

It takes place after the initial system security accreditation.

It takes place in the middle of system security accreditation.

It takes place before and after system security accreditation.

It takes place before the initial system security accreditation.

It takes place after the initial system security accreditation.

Which of the following individuals is responsible for preparing and submitting security status reports to the organizations?

Senior Agency Information Security Officer

What does OCTAVE stand for?

Operationally Critical Threat, Asset, and Vulnerability Evaluation

Operationally Computer Threat, Asset, and Vulnerability Evaluation

Operationally Critical Threat, Asset, and Vulnerability Evaluation

Operationally Computer Threat, Asset, and Vulnerability Elimination

Operationally Critical Threat, Asset, and Vulnerability Elimination

Which of the following C&A professionals plays the role of an advisor?

Information System Security Engineer (ISSE)

Chief Information Officer (CIO)

Which of the following formulas was developed by FIPS 199 for categorization of an information system?

SCinformation system = {(confidentiality, impact), (integrity, impact), (availability, impact)}

SCinformation system = {(confidentiality, impact), (integrity, controls), (availability, risk)}

SCinformation system = {(confidentiality, risk), (integrity, impact), (availability, controls)}

SCinformation system = {(confidentiality, impact), (integrity, impact), (availability, impact)}

SCinformation system = {(confidentiality, controls), (integrity, controls), (availability, controls )}

ISC CAP Practice Test 9 - Free Online Exam Prep & Questions

You are the project manager of the NNN project for your company. You and the project team are working together to plan the risk responses for the project. You feel that the team has successfully completed the risk response planning and now you must initiate what risk process it is. Which of the following risk processes is repeated after the plan risk responses to determine if the overall project risk has been satisfactorily decreased?

Become a Premium Member for full access

Unlock Premium Member

ISC CAP Practice Test 9

Question

ISC CAP Practice Tests

Practice Tests