QUESTION: 137

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

Continuity of Operations Plan
Disaster recovery plan
Contingency plan
Business continuity plan

Answer(s): C

Reveal Solution Next Question

QUESTION: 138

The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation.
What are the process activities of this phase?
Each correct answer represents a complete solution. Choose all that apply.

System development
Certification analysis
Registration
Assessment of the Analysis Results
Configuring refinement of the SSAA

Answer(s): A,B,D,E

Reveal Solution Next Question

QUESTION: 139

ISO 17799 has two parts. The first part is an implementation guide with guidelines on how to build a comprehensive information security infrastructure and the second part is an auditing guide based on requirements that must be met for an organization to be deemed compliant with ISO 17799.
What are the ISO 17799 domains?
Each correct answer represents a complete solution. Choose all that apply.

Information security policy for the organization
Personnel security
Business continuity management
System architecture management
System development and maintenance

Answer(s): A,B,C,E

Reveal Solution Next Question

QUESTION: 140

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation.
Which of the following statements are true about Certification and Accreditation?
Each correct answer represents a complete solution. Choose two.

Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
Certification is the official management decision given by a senior agency official to authorize operation of an information system.
Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.

Answer(s): A,D

Reveal Solution Next Question

Free CAP Exam Braindumps (page: 36)

QUESTION: 137

QUESTION: 138

QUESTION: 139

QUESTION: 140

CAP Exam Discussions & Posts