Home / ISC / CAP

ISC CAP Practice Test - Questions Answers, Page 37

Question list

List of questions

Question 361

(0)

Which of the following relations correctly describes total risk?

Question 362

(0)

Which of the following individuals is responsible for the final accreditation decision?

Question 363

(0)

Which of the following individuals makes the final accreditation decision?

Question 364

(0)

A ________ points to a statement in a policy or procedure that helps determine a course of action.

Question 365

(0)

For which of the following reporting requirements are continuous monitoring documentation reports used?

Question 366

(0)

Which of the following are the types of assessment tests addressed in NIST SP 800-53A?

Question 367

(0)

Which of the following individuals is responsible for configuration management and control task?

Question 368

(0)

Which of the following documents is used to provide a standard approach to the assessment of NIST SP 800-53 security controls?

Question 369

(0)

Which of the following guidance documents is useful in determining the impact level of a particular threat on agency systems?

Question 370

(0)

Tom is the project manager for his organization. In his project he has recently finished the risk response planning. He tells his manager that he will now need to update the cost and schedule baseli

Question 361

Which of the following relations correctly describes total risk?

Total Risk = Threats x Vulnerability x Asset Value

Total Risk = Viruses x Vulnerability x Asset Value

Total Risk = Threats x Exploit x Asset Value

Total Risk = Viruses x Exploit x Asset Value

Show Answer Comment (0)

Question 362

Which of the following individuals is responsible for the final accreditation decision?

Certification Agent

User Representative

Information System Owner

Risk Executive

Show Answer Comment (0)

Question 363

Which of the following individuals makes the final accreditation decision?

DAA

ISSO

CIO

CISO

Show Answer Comment (0)

Question 364

A ________ points to a statement in a policy or procedure that helps determine a course of action.

Comment

Guideline

Procedure

Baseline

Show Answer Comment (0)

Question 365

For which of the following reporting requirements are continuous monitoring documentation reports used?

FISMA

NIST

HIPAA

FBI

Show Answer Comment (0)

Question 366

Which of the following are the types of assessment tests addressed in NIST SP 800-53A?

Functional, penetration, validation

Validation, evaluation, penetration

Validation, penetration, evaluation

Functional, structural, penetration

Show Answer Comment (0)

Question 367

Which of the following individuals is responsible for configuration management and control task?

Common control provider

Information system owner

Authorizing official

Chief information officer

Show Answer Comment (0)

Question 368

Which of the following documents is used to provide a standard approach to the assessment of NIST SP 800-53 security controls?

NIST SP 800-53A

NIST SP 800-66

NIST SP 800-41

NIST SP 800-37

Show Answer Comment (0)

Question 369

Which of the following guidance documents is useful in determining the impact level of a particular threat on agency systems?

NIST SP 800-41

NIST SP 800-37

FIPS 199

NIST SP 800-14

Show Answer Comment (0)

Tom is the project manager for his organization. In his project he has recently finished the risk response planning. He tells his manager that he will now need to update the cost and schedule baselines. Why would the risk response planning cause Tom the need to update the cost and schedule baselines?

New or omitted work as part of a risk response can cause changes to the cost and/or schedule baseline.

Risk responses protect the time and investment of the project.

Risk responses may take time and money to implement.

Baselines should not be updated, but refined through versions.

Show Answer Comment (0)

Total 395 questions