Free CAP Exam Braindumps
Certified Authorization Professional Questions 121–125 (page: 26)

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

In which of the following testing methodologies do assessors use all available documentation and work under no constraints, and attempt to circumvent the security features of an information system?

You are the project manager of the GHG project. You are preparing for the quantitative risk analysis process. You are using organizational process assets to help you complete the quantitative risk analysis process.
Which one of the following is NOT a valid reason to utilize organizational process assets as a part of the quantitative risk analysis process?

Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?

Bill is the project manager of the JKH Project. He and the project team have identified a risk event in the project with a high probability of occurrence and the risk event has a high cost impact on the project. Bill discusses the risk event with Virginia, the primary project customer, and she decides that the requirements surrounding the risk event should be removed from the project. The removal of the requirements does affect the project scope, but it can release the project from the high risk exposure.
What risk response has been enacted in this project?