Free CAP Exam Braindumps
Certified Authorization Professional Questions 126–130 (page: 27)

Updated On: 10-Feb-2026

Which of the following statements is true about residual risks?

  1. It is a weakness or lack of safeguard that can be exploited by a threat.
  2. It can be considered as an indicator of threats coupled with vulnerability.
  3. It is the probabilistic risk after implementing all security measures.
  4. It is the probabilistic risk before implementing all security measures.

Answer(s): C



Which of the following documents is described in the statement below? "It is developed along with all processes of the risk management. It contains the results of the qualitative risk analysis, quantitative risk analysis, and risk response planning."

  1. Risk register
  2. Risk management plan
  3. Project charter
  4. Quality management plan

Answer(s): A



You are the project manager of the GHY project for your organization. You are working with your project team to begin identifying risks for the project. As part of your preparation for identifying the risks within the project you will need eleven inputs for the process.
Which one of the following is NOT an input to the risk identification process?

  1. Cost management plan
  2. Quality management plan
  3. Procurement management plan
  4. Stakeholder register

Answer(s): C



Mary is the project manager of the HGH Project for her company. She and her project team have agreed that if the vendor is late by more than ten days they will cancel the order and hire the NBG Company to fulfill the order. The NBG Company can guarantee orders within three days, but the costs of their products are significantly more expensive than the current vendor.
What type of a response strategy is this?

  1. External risk response
  2. Internal risk management strategy
  3. Contingent response strategy
  4. Expert judgment

Answer(s): C



Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system?

  1. FITSAF
  2. TCSEC
  3. FIPS
  4. SSAA

Answer(s): B



Viewing page 27 of 80
Viewing questions 131 - 135 out of 395 questions


Post your Comments and Discuss ISC CAP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!