Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. ISC
  5. CAP

ISC CAP Exam Questions
Certified Authorization Professional (Page 22 )

Updated On: 21-Mar-2026
Page 16 of 80
PDF with 395 Questions

You are the project manager of the GHG project. You are preparing for the quantitative risk analysis process. You are using organizational process assets to help you complete the quantitative risk analysis process.
Which one of the following is NOT a valid reason to utilize organizational process assets as a part of the quantitative risk analysis process?

  1. You will use organizational process assets for risk databases that may be available from industry sources.
  2. You will use organizational process assets for studies of similar projects by risk specialists.
  3. You will use organizational process assets to determine costs of all risks events within the current project.
  4. You will use organizational process assets for information from prior similar projects.

Answer(s): C



Which of the following objectives are defined by integrity in the C.I.A triad of information security systems?
Each correct answer represents a part of the solution. Choose three.

  1. It preservesthe internal and external consistency of information.
  2. It prevents the unauthorized or unintentional modification of information by the authorized users.
  3. It prevents the modification of information by the unauthorized users.
  4. It prevents the intentional or unintentional unauthorized disclosure of a message's contents .

Answer(s): A,B,C



You and your project team are just starting the risk identification activities for a project that is scheduled to last for 18 months. Your project team has already identified a long list of risks that need to be analyzed. How often should you and the project team do risk identification?

  1. At least once per month
  2. Identify risks is an iterative process.
  3. It depends on how many risks are initially identified.
  4. Several times until the project moves into execution

Answer(s): B



Eric is the project manager of the MTC project for his company. In this project a vendor has offered Eric a sizeable discount on all hardware if his order total for the project is more than $125, 000. Right now, Eric is likely to spend $118, 000 with vendor. If Eric spends $7, 000 his cost savings for the project will be $12, 500, but he cannot purchase hardware if he cannot implement the hardware immediately due to organizational policies. Eric consults with Amy and Allen, other project managers in the organization, and asks if she needs any hardware for their projects. Both Amy and Allen need hardware and they agree to purchase the hardware through Eric's relationship with the vendor.
What positive risk response has happened in this instance?

  1. Transference
  2. Exploiting
  3. Sharing
  4. Enhancing

Answer(s): C



You work as a project manager for BlueWell Inc. You are preparing to plan risk responses for your project with your team. How many risk response types are available for a negative risk event in the project?

  1. Seven
  2. Three
  3. Four
  4. One

Answer(s): C



Viewing page 22 of 80
Viewing questions 106 - 110 out of 395 questions



Post your Comments and Discuss ISC CAP exam dumps with other Community members:

CAP Exam Discussions & Posts

AI Tutor 👋 I’m here to help!