Free CAP Exam Braindumps
Certified Authorization Professional Questions 161–165 (page: 34)

Updated On: 10-Feb-2026

Which of the following formulas was developed by FIPS 199 for categorization of an information type?

  1. SC information type = {(confidentiality, controls), (integrity, controls), (authentication, controls)}
  2. SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}
  3. SC information type = {(confidentiality, risk), (integrity, risk), (availability, risk)}
  4. SC information type = {(Authentication, impact), (integrity, impact), (availability, impact)}

Answer(s): B



Which of the following is NOT considered an environmental threat source?

  1. Pollution
  2. Hurricane
  3. Chemical
  4. Water

Answer(s): B



Which of the following is NOT a type of penetration test?

  1. Cursory test
  2. Partial-knowledge test
  3. Zero-knowledge test
  4. Full knowledge test

Answer(s): A



Which of the following formulas was developed by FIPS 199 for categorization of an information system?

  1. SC information system = {(confidentiality, impact), (integrity, controls), (availability, risk)}
  2. SC information system = {(confidentiality, impact), (integrity, impact), (availability, impact)}
  3. SC information system = {(confidentiality, controls), (integrity, controls), (availability, controls )}
  4. SC information system = {(confidentiality, risk), (integrity, impact), (availability, controls)}

Answer(s): B



Which of the following NIST documents defines impact?

  1. NIST SP 800-53
  2. NIST SP 800-26
  3. NIST SP 800-30
  4. NIST SP 800-53A

Answer(s): C



Viewing page 34 of 80
Viewing questions 166 - 170 out of 395 questions


Post your Comments and Discuss ISC CAP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!