QUESTION: 121

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

Finding an economic balance between the impact of the risk and the cost of the countermeasure
Identifying the risk
Assessing the impact of potential threats
Identifying the accused

Answer(s): A,B,C

Reveal Solution Next Question

QUESTION: 122

In which of the following testing methodologies do assessors use all available documentation and work under no constraints, and attempt to circumvent the security features of an information system?

Full operational test
Penetration test
Paper test
Walk-through test

Answer(s): B

Reveal Solution Next Question

You are the project manager of the GHG project. You are preparing for the quantitative risk analysis process. You are using organizational process assets to help you complete the quantitative risk analysis process.
Which one of the following is NOT a valid reason to utilize organizational process assets as a part of the quantitative risk analysis process?

You will use organizational process assets for studies of similar projects by risk specialists.
You will use organizational process assets to determine costs of all risks events within the current project.
You will use organizational process assets for information from prior similar projects.
You will use organizational process assets for risk databases that may be available from industry sources.

Answer(s): B

Reveal Solution Next Question

QUESTION: 124

Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?

SSAA
FIPS
FITSAF
TCSEC

Answer(s): A

Reveal Solution Next Question

Free CAP Exam Braindumps (page: 32)

QUESTION: 121

QUESTION: 122

QUESTION: 123

QUESTION: 124

CAP Exam Discussions & Posts