Free CAP Exam Braindumps
Certified Authorization Professional Questions 166–170 (page: 35)

Updated On: 10-Feb-2026

Which of the following relations correctly describes residual risk?

  1. Residual Risk = Threats x Vulnerability x Asset Gap x Control Gap
  2. Residual Risk = Threats x Exploit x Asset Value x Control Gap
  3. Residual Risk = Threats x Exploit x Asset Value x Control Gap
  4. Residual Risk = Threats x Vulnerability x Asset Value x Control Gap

Answer(s): D



Which of the following is NOT a phase of the security certification and accreditation process?

  1. Initiation
  2. Security certification
  3. Operation
  4. Maintenance

Answer(s): C



Which of the following processes has the goal to ensure that any change does not lead to reduced or compromised security?

  1. Change control management
  2. Security management
  3. Configuration management
  4. Risk management

Answer(s): A



Which of the following is not a part of Identify Risks process?

  1. System or process flow chart
  2. Influence diagram
  3. Decision tree diagram
  4. Cause and effect diagram

Answer(s): C



In which of the following phases does the SSAA maintenance take place?

  1. Phase 3
  2. Phase 2
  3. Phase 1
  4. Phase 4

Answer(s): D



Viewing page 35 of 80
Viewing questions 171 - 175 out of 395 questions


Post your Comments and Discuss ISC CAP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!