Home / ISC / CAP

ISC CAP Practice Test - Questions Answers, Page 32

Question list

List of questions

Question 311

(0)

To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to this criteria, which of the following controls are intend

Question 312

(0)

You are the project manager for a construction project. The project involves casting of a column in a very narrow space. Because of lack of space, casting it is highly dangerous. High technical skil

Question 313

(0)

Which of the following statements about the authentication concept of information security management is true?

Question 314

(0)

You and your project team have identified the project risks and now are analyzing the probability and impact of the risks. What type of analysis of the risks provides a quick and high-level review o

Question 315

(0)

NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?

Question 316

(0)

What are the responsibilities of a system owner? Each correct answer represents a complete solution. Choose all that apply.

Question 317

(0)

During which of the following processes, probability and impact matrix is prepared?

Question 318

(0)

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior t

Question 319

(0)

You work as a project manager for BlueWell Inc. Your project is running late and you must respond to the risk. Which risk response can you choose that will also cause you to update the human resourc

Question 320

(0)

Which of the following groups represents the most likely source of an asset loss through the inappropriate use of computers?

Question 311

To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to this criteria, which of the following controls are intended to prevent an incident from occurring?

Adaptive controls

Preventive controls

Detective controls

Corrective controls

Show Answer Comment (0)

Question 312

You are the project manager for a construction project. The project involves casting of a column in a very narrow space. Because of lack of space, casting it is highly dangerous. High technical skill will be required for casting that column. You decide to hire a local expert team for casting that column. Which of the following types of risk response are you following?

Mitigation

Avoidance

Transference

Acceptance

Show Answer Comment (0)

Question 313

Which of the following statements about the authentication concept of information security management is true?

It determines the actions and behaviors of a single individual within a system, and identifies that particular individual.

It ensures that modifications are not made to data by unauthorized personnel or processes .

It establishes the users' identity and ensures that the users are who they say they are.

It ensures the reliable and timely access to resources.

Show Answer Comment (0)

Question 314

You and your project team have identified the project risks and now are analyzing the probability and impact of the risks. What type of analysis of the risks provides a quick and high-level review of each identified risk event?

Qualitative risk analysis

Seven risk responses

Quantitative risk analysis

A risk probability-impact matrix

Show Answer Comment (0)

Question 315

NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?

Substantial

Significant

Abbreviated

Comprehensive

Show Answer Comment (0)

Question 316

What are the responsibilities of a system owner?

Each correct answer represents a complete solution. Choose all that apply.

Integrates security considerations into application and system purchasing decisions and development projects.

Ensures that the systems are properly assessed for vulnerabilities and must report any to the incident response team and data owner.

Ensures that adequate security is being provided by the necessary controls, password management, remote access controls, operating system configurations, and so on.

Ensures that the necessary security controls are in place.

Show Answer Comment (0)

Question 317

During which of the following processes, probability and impact matrix is prepared?

Plan Risk Responses

Perform Quantitative Risk Analysis

Perform Qualitative Risk Analysis

Monitoring and Control Risks

Show Answer Comment (0)

Question 318

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?

Each correct answer represents a complete solution. Choose two.

Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.

Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.

Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.

Certification is the official management decision given by a senior agency official to authorize operation of an information system.

Show Answer Comment (0)

Question 319

You work as a project manager for BlueWell Inc. Your project is running late and you must respond to the risk. Which risk response can you choose that will also cause you to update the human resource management plan?

Fast tracking the project

Teaming agreements

Transference

Crashing the project

Show Answer Comment (0)