QUESTION: 154

DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply.

System Definition
Validation
Identification
Accreditation
Verification
Re-Accreditation

Answer(s): A,B,E,F

Explanation:

The Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) is a process defined by the United States Department of Defense (DoD) for managing risk. DIACAP replaced the former process, known as DITSCAP (Department of Defense Information Technology Security Certification and Accreditation Process), in 2006. DoD Instruction (DoDI) 8510.01 establishes a standard DoD-wide process with a set of activities, general tasks, and a management structure to certify and accredit an Automated Information System (AIS) that will maintain the Information Assurance (IA) posture of the Defense Information Infrastructure (DII) throughout the system's life cycle. DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. It identifies four phases: 1.System Definition 2.Verification 3.Validation 4.Re-Accreditation

Reveal Solution Next Question

QUESTION: 155

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

Identifying the risk
Assessing the impact of potential threats
Identifying the accused
Finding an economic balance between the impact of the risk and the cost of the countermeasure

Answer(s): A,B,D

Explanation:

There are three goals of risk management as follows: Identifying the risk Assessing the impact of potential threats Finding an economic balance between the impact of the risk and the cost of the countermeasure Answer C is incorrect. Identifying the accused does not come under the scope of risk management.

Reveal Solution Next Question

QUESTION: 156

NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?

Comprehensive
Significant
Abbreviated
Substantial

Answer(s): C

Explanation:

Abbreviated interview consists of informal and ad hoc interviews. Answer D is incorrect. Substantial interview consists of informal and structured interviews. Answer A is incorrect. Comprehensive interview consists of formal and structured interviews. Answer B is incorrect. There is no such type of interview in NIST SP 800-53A.

Reveal Solution Next Question

QUESTION: 157

Which of the following are the principle duties performed by the BIOS during POST (power-on-self-test)? Each correct answer represents a part of the solution. Choose all that apply.

It provides a user interface for system's configuration.
It identifies, organizes, and selects boot devices.
It delegates control to other BIOS, if it is required.
It discovers size and verifies system memory.
It verifies the integrity of the BIOS code itself.
It interrupts the execution of all running programs.

Answer(s): A,B,C,D,E

Explanation:

The principle duties performed by the BIOS during POST (power-on-self-test) are as follows: It verifies the integrity of the BIOS code itself. It discovers size and verifies system memory. It discovers, initializes, and catalogs all system hardware. It delegates control to other BIOS if it is required. It provides a user interface for system's configuration. It identifies, organizes, and selects boot devices. It executes the bootstrap program. Answer F is incorrect. The BIOS does not interrupt the execution of all running programs.

Reveal Solution Next Question

Free CSSLP Exam Braindumps (page: 38)

QUESTION: 154

Explanation:

QUESTION: 155

Explanation:

QUESTION: 156

Explanation:

QUESTION: 157

Explanation: