ExamGecko
Login
Home / ISC / CAP / List of questions
Ask Question

ISC CAP Practice Test - Questions Answers, Page 24

List of questions

Question 231

Report Export Collapse

Which of the following are the objectives of the security certification documentation task? Each correct answer represents a complete solution. Choose all that apply.

To prepare the Plan of Action and Milestones (POAM) based on the security assessment
To prepare the Plan of Action and Milestones (POAM) based on the security assessment
To provide the certification findings and recommendations to the information system owner
To provide the certification findings and recommendations to the information system owner
To assemble the final security accreditation package and then submit it to the authorizing o fficial
To assemble the final security accreditation package and then submit it to the authorizing o fficial
To update the system security plan based on the results of the security assessment
To update the system security plan based on the results of the security assessment
Suggested answer: A, B, C, D
asked 18/09/2024
Matthew Walsh
33 questions

Question 232

Report Export Collapse

Which of the following statements about System Access Control List (SACL) is true?

It contains a list of any events that are set to audit for that particular object.
It contains a list of any events that are set to audit for that particular object.
It is a mechanism for reducing the need for globally unique IP addresses.
It is a mechanism for reducing the need for globally unique IP addresses.
It contains a list of both users and groups and whatever permissions they have.
It contains a list of both users and groups and whatever permissions they have.
It exists for each and every permission entry assigned to any object.
It exists for each and every permission entry assigned to any object.
Suggested answer: A
asked 18/09/2024
Yuri Mitrofanov
49 questions

Question 233

Report Export Collapse

Kelly is the project manager of the BHH project for her organization. She is completing the risk identification process for this portion of her project. Which one of the following is the only thing that the risk identification process will create for Kelly?

Project document updates
Project document updates
Risk register updates
Risk register updates
Change requests
Change requests
Risk register
Risk register
Suggested answer: D
asked 18/09/2024
YASSIR EL GHAZY
64 questions

Question 234

Report Export Collapse

You are the project manager for your organization. You are working with your project team to complete the qualitative risk analysis process. The first tool and technique you are using requires that you assess the probability and what other characteristic of each identified risk in the project?

Risk owner
Risk owner
Risk category
Risk category
Impact
Impact
Cost
Cost
Suggested answer: C
asked 18/09/2024
Rey Geric Villafranca
47 questions

Question 235

Report Export Collapse

You are preparing to complete the quantitative risk analysis process with your project team and several subject matter experts. You gather the necessary inputs including the project's cost management plan. Why is it necessary to include the project's cost management plan in the preparation for the quantitative risk analysis process?

The project's cost management plan can help you to determine what the total cost of the project is allowed to be.
The project's cost management plan can help you to determine what the total cost of the project is allowed to be.
The project's cost management plan provides direction on how costs may be changed due to identified risks.
The project's cost management plan provides direction on how costs may be changed due to identified risks.
The project's cost management plan provides control that may help determine the structure for quantitative analysis of the budget.
The project's cost management plan provides control that may help determine the structure for quantitative analysis of the budget.
The project's cost management plan is not an input to the quantitative risk analysis process .
The project's cost management plan is not an input to the quantitative risk analysis process .
Suggested answer: C
asked 18/09/2024
Denis Mourghen
53 questions

Question 236

Report Export Collapse

What NIACAP certification levels are recommended by the certifier?

Each correct answer represents a complete solution. Choose all that apply.

Minimum Analysis
Minimum Analysis
Basic System Review
Basic System Review
Detailed Analysis
Detailed Analysis
Maximum Analysis
Maximum Analysis
Comprehensive Analysis
Comprehensive Analysis
Basic Security Review
Basic Security Review
Suggested answer: A, C, E, F
asked 18/09/2024
Sasha Grib
50 questions

Question 237

Report Export Collapse

You work as a project manager for BlueWell Inc. There has been a delay in your project work that is adversely affecting the project schedule. You decided, with your stakeholders' approval, to fast track the project work to get the project done faster. When you fast track the project which of the following are likely to increase?

Become a Premium Member for full access
  Unlock Premium Member

Question 238

Report Export Collapse

Information Security management is a process of defining the security controls in order to protect information assets. What are the security management responsibilities?

Each correct answer represents a complete solution. Choose all that apply.

Become a Premium Member for full access
  Unlock Premium Member

Question 239

Report Export Collapse

Which of the following are included in Technical Controls?

Each correct answer represents a complete solution. Choose all that apply.

Become a Premium Member for full access
  Unlock Premium Member

Question 240

Report Export Collapse

You are the project manager of the HJK project for your organization. You and the project team have created risk responses for many of the risk events in the project. A teaming agreement is an example of what risk response?

Become a Premium Member for full access
  Unlock Premium Member
Total 395 questions
Go to page: of 40
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose all that apply.
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented?
DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply.
The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3? Each correct answer represents a complete solution. Choose all that apply.
Certification and Accreditation (C&A or CnA) is a process for implementing information security. Which of the following is the correct order of C&A phases in a DITSCAP assessment?
Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented?
According to FIPS Publication 199, what are the three levels of potential impact on organizations in the event of a compromise on confidentiality, integrity, and availability?
Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.
Which of the following individuals makes the final accreditation decision?