ExamGecko
Home Home / ISC / CAP

ISC CAP Practice Test - Questions Answers, Page 28

Question list
Search
Search

List of questions

Search

Related questions











An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

A.
Anonymous
A.
Anonymous
Answers
B.
Multi-factor
B.
Multi-factor
Answers
C.
Biometrics
C.
Biometrics
Answers
D.
Mutual
D.
Mutual
Answers
Suggested answer: B

Which of the following risk responses delineates that the project plan will not be changed to deal with the risk?

A.
Acceptance
A.
Acceptance
Answers
B.
Mitigation
B.
Mitigation
Answers
C.
Exploitation
C.
Exploitation
Answers
D.
Transference
D.
Transference
Answers
Suggested answer: A

Which of the following statements reflect the 'Code of Ethics Canons' in the '(ISC)2 Code of Ethics'? Each correct answer represents a complete solution.

Choose all that apply.

A.
Protect society, the commonwealth, and the infrastructure.
A.
Protect society, the commonwealth, and the infrastructure.
Answers
B.
Act honorably, honestly, justly, responsibly, and legally.
B.
Act honorably, honestly, justly, responsibly, and legally.
Answers
C.
Provide diligent and competent service to principals.
C.
Provide diligent and competent service to principals.
Answers
D.
Give guidance for resolving good versus good and bad versus bad dilemmas.
D.
Give guidance for resolving good versus good and bad versus bad dilemmas.
Answers
Suggested answer: A, B, C

The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate that the preceding work has produced an IS that operates in a specified computing environment. What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.

A.
Perform certification evaluation of the integrated system
A.
Perform certification evaluation of the integrated system
Answers
B.
System development
B.
System development
Answers
C.
Certification and accreditation decision
C.
Certification and accreditation decision
Answers
D.
Develop recommendation to the DAA
D.
Develop recommendation to the DAA
Answers
E.
Continue to review and refine the SSAA
E.
Continue to review and refine the SSAA
Answers
Suggested answer: A, C, D, E

John is the project manager of the NHQ Project for his company. His project has 75 stakeholders, some of which are external to the organization. John needs to make certain that he communicates about risk in the most appropriate method for the external stakeholders. Which project management plan will be the best guide for John to communicate to the external stakeholders?

A.
Risk Response Plan
A.
Risk Response Plan
Answers
B.
Risk Management Plan
B.
Risk Management Plan
Answers
C.
Project Management Plan
C.
Project Management Plan
Answers
D.
Communications Management Plan
D.
Communications Management Plan
Answers
Suggested answer: D

Your organization has named you the project manager of the JKN Project. This project has a BAC of $1,500,000 and it is expected to last 18 months.

Management has agreed that if the schedule baseline has a variance of more than five percent then you will need to crash the project. What happens when the project manager crashes a project?

A.
Project costs will increase.
A.
Project costs will increase.
Answers
B.
The amount of hours a resource can be used will diminish.
B.
The amount of hours a resource can be used will diminish.
Answers
C.
The project will take longer to complete, but risks will diminish.
C.
The project will take longer to complete, but risks will diminish.
Answers
D.
Project risks will increase.
D.
Project risks will increase.
Answers
Suggested answer: A

Which of the following individuals makes the final accreditation decision?

A.
ISSE
A.
ISSE
Answers
B.
DAA
B.
DAA
Answers
C.
CRO
C.
CRO
Answers
D.
ISSO
D.
ISSO
Answers
Suggested answer: B

Which of the following DoD directives defines DITSCAP as the standard C&A process for the Department of Defense?

A.
DoD 8000.1
A.
DoD 8000.1
Answers
B.
DoD 5200.40
B.
DoD 5200.40
Answers
C.
DoD 5200.22-M
C.
DoD 5200.22-M
Answers
D.
DoD 8910.1
D.
DoD 8910.1
Answers
Suggested answer: B

Virginia is the project manager for her organization. She has hired a subject matter expert to interview the project stakeholders on certain identified risks within the project. The subject matter expert will assess the risk event with what specific goal in mind?

A.
To determine the bias of the risk event based on each person interviewed
A.
To determine the bias of the risk event based on each person interviewed
Answers
B.
To determine the probability and cost of the risk event
B.
To determine the probability and cost of the risk event
Answers
C.
To determine the validity of each risk event
C.
To determine the validity of each risk event
Answers
D.
To determine the level of probability and impact for each risk event
D.
To determine the level of probability and impact for each risk event
Answers
Suggested answer: D

A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies?

Each correct answer represents a complete solution. Choose all that apply.

A.
Systematic
A.
Systematic
Answers
B.
Informative
B.
Informative
Answers
C.
Regulatory
C.
Regulatory
Answers
D.
Advisory
D.
Advisory
Answers
Suggested answer: B, C, D
Total 395 questions
Go to page: of 40