Free CAP Exam Braindumps
Certified Authorization Professional Questions 81–85 (page: 18)

Updated On: 10-Feb-2026

You are the project manager for GHY Project and are working to create a risk response for a negative risk. You and the project team have identified the risk that the project may not complete on time, as required by the management, due to the creation of the user guide for the software you're creating.

You have elected to hire an external writer in order to satisfy the requirements and to alleviate the risk event.
What type of risk response have you elected to use in this instance?

  1. Sharing
  2. Avoidance
  3. Transference
  4. Exploiting

Answer(s): C



You are the project manager of the GHQ project for your company. You are working you're your project team to prepare for the qualitative risk analysis process. Mary, a project team member, does not understand why you need to complete qualitative risks analysis. You explain to Mary that qualitative risks analysis helps you determine which risks needs additional analysis. There are also some other benefits that qualitative risks analysis can do for the project.
Which one of the following is NOT an accomplishment of the qualitative risk analysis process?

  1. Cost of the risk impact if the risk event occurs
  2. Corresponding impact on project objectives
  3. Time frame for a risk response
  4. Prioritization of identified risk events based on probability and impact

Answer(s): A



Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them.
Which of the following access control models will he use?

  1. Discretionary Access Control
  2. Mandatory Access Control
  3. Policy Access Control
  4. Role-Based Access Control

Answer(s): D



Which of the following are the common roles with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose all that apply.

  1. Custodian
  2. User
  3. Security auditor
  4. Editor
  5. Owner

Answer(s): A,B,C,E



To help review or design security controls, they can be classified by several criteria. One of these criteria is based on nature. According to this criteria, which of the following controls consists of incident response processes, management oversight, security awareness, and training?

  1. Technical control
  2. Physical control
  3. Procedural control
  4. Compliance control

Answer(s): C



Viewing page 18 of 80
Viewing questions 86 - 90 out of 395 questions


Post your Comments and Discuss ISC CAP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!