Free CAP Exam Braindumps (page: 9)

Page 8 of 99

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

  1. Develop DIACAP strategy.
  2. Assign IA controls.
  3. Assemble DIACAP team.
  4. Initiate IA implementation plan.
  5. Register system with DoD Component IA Program.
  6. Conduct validation activity.

Answer(s): A,B,C,D,E



Information risk management (IRM) is the process of identifying and assessing risk, reducing it to an acceptable level, and implementing the right mechanisms to maintain that level.
What are the different categories of risk?
Each correct answer represents a complete solution. Choose all that apply.

  1. System interaction
  2. Human interaction
  3. Equipment malfunction
  4. Inside and outside attacks
  5. Social status
  6. Physical damage

Answer(s): B,C,D,E,F



Neil works as a project manager for SoftTech Inc. He is working with Tom, the COO of his company, on several risks within the project. Tom understands that through qualitative analysis Neil has identified many risks in the project. Tom's concern, however, is that the priority list of these risk events are sorted in "high-risk," "moderate-risk," and "low-risk" as conditions apply within the project. Tom wants to know that is there any other objective on which Neil can make the priority list for project risks.
What will be Neil's reply to Tom?

  1. Risk may be listed by the responses inthe near-term
  2. Risks may be listed by categories
  3. Risks may be listed by the additional analysis and response
  4. Risks may be listed by priority separately for schedule, cost, and performance

Answer(s): D



In which type of access control do user ID and password system come under?

  1. Administrative
  2. Technical
  3. Power
  4. Physical

Answer(s): B






Post your Comments and Discuss ISC CAP exam with other Community members:

CAP Discussions & Posts