ExamGecko
Login
Home / ISC / CAP / List of questions
Ask Question

ISC CAP Practice Test - Questions Answers, Page 23

Add to Whishlist

List of questions

Question 221

Report Export Collapse

Which of the following are the types of access controls?

Each correct answer represents a complete solution. Choose three.

Become a Premium Member for full access
  Unlock Premium Member

Question 222

Report Export Collapse

You are the project manager of the NNQ Project for your company and are working you're your project team to define contingency plans for the risks within your project. Mary, one of your project team members, asks what a contingency plan is. Which of the following statements best defines what a contingency response is?

Become a Premium Member for full access
  Unlock Premium Member

Question 223

Report Export Collapse

Who is responsible for the stakeholder expectations management in a high-profile, high-risk project?

Become a Premium Member for full access
  Unlock Premium Member

Question 224

Report Export Collapse

Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production?

Each correct answer represents a part of the solution. Choose all that apply.

Become a Premium Member for full access
  Unlock Premium Member

Question 225

Report Export Collapse

Which of the following refers to a process that is used for implementing information security?

Become a Premium Member for full access
  Unlock Premium Member

Question 226

Report Export Collapse

What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?

Become a Premium Member for full access
  Unlock Premium Member

Question 227

Report Export Collapse

Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk responses for the risk event. The event is not likely to happen for several months but the probability of the event is high. Which one of the following is a valid response to the identified risk event?

Become a Premium Member for full access
  Unlock Premium Member

Question 228

Report Export Collapse

Which of the following documents is described in the statement below?

"It is developed along with all processes of the risk management. It contains the results of the qualitative risk analysis, quantitative risk analysis, and risk response planning."

Become a Premium Member for full access
  Unlock Premium Member

Question 229

Report Export Collapse

Joan is a project management consultant and she has been hired by a firm to help them identify risk events within the project. Joan would first like to examine the project documents including the plans, assumptions lists, project files, and contracts. What key thing will help Joan to discover risks within the review of the project documents?

Become a Premium Member for full access
  Unlock Premium Member

Question 230

Report Export Collapse

Which of the following statements about the availability concept of Information security management is true?

Become a Premium Member for full access
  Unlock Premium Member
Total 395 questions
Go to page: of 40
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose all that apply.
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented?
DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply.
The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3? Each correct answer represents a complete solution. Choose all that apply.
Certification and Accreditation (C&A or CnA) is a process for implementing information security. Which of the following is the correct order of C&A phases in a DITSCAP assessment?
Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented?
According to FIPS Publication 199, what are the three levels of potential impact on organizations in the event of a compromise on confidentiality, integrity, and availability?
Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.
Which of the following individuals makes the final accreditation decision?