QUESTION: 162

What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?

Risk analysis plan
Staffing management plan
Risk management plan
Human resource management plan

Answer(s): C

Explanation:

The risk management plan defines how risks will be identified, analyzed, responded to, and then monitored and controlled regardless of the structure of the organization. Answer D is incorrect. The human resources management plan does define how risks will be analyzed. Answer B is incorrect. The staffing management plan does define how risks will be analyzed. Answer A is incorrect. The risk analysis plan does define how risks will be analyzed.

Reveal Solution Next Question

QUESTION: 163

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series? Each correct answer represents a complete solution. Choose all that apply.

Defending systems
Providing IA Certification and Accreditation
Providing command and control and situational awareness
Protecting information

Answer(s): A,C,D

Explanation:

The various objectives of the DoD 8500 series are as follows: Protecting information Defending systems Providing command and control and situational awareness Making sure that the information assurance is integrated into processes Increasing security awareness throughout the DoD's workforce

Reveal Solution Next Question

QUESTION: 164

Which of the following vulnerabilities occurs when an application directly uses or concatenates potentially hostile input with data file or stream functions?

Insecure cryptographic storage
Malicious file execution
Insecure communication
Injection flaw

Answer(s): B

Explanation:

Malicious file execution is a vulnerability that occurs when an application directly uses or concatenates potentially hostile input with data file or stream functions. This leads to arbitrary remote and hostile data being included, processed, and invoked by the Web server. Malicious file execution can be prevented by using an indirect object reference map, input validation, or explicit taint checking mechanism. Answer D is incorrect. Injection flaw occurs when data is sent to an interpreter as a part of command or query. Answer A is incorrect. Insecure cryptographic storage occurs when applications have failed to encrypt data. Answer C is incorrect. Insecure communication occurs when applications have failed to encrypt network traffic.

Reveal Solution Next Question

QUESTION: 165 DRAG DROP

Drag and drop the appropriate principle documents in front of their respective functions.

The Answer is Exhibit B.

Answer(s): A

Explanation:

The various principle documents of transformation are as follows: CNSSP 22: It establishes a national risk management policy for national security systems. CNSSI 1199: It creates the technique in which the national security community classifies the information and information systems with regard to confidentiality, integrity, and availability. CNSSI 1253: It combines DCID 6/3, DOD Instructions 8500.2, NIST SP 800-53, and other security sources into a single cohesive repository of security controls. CNSSI 1253 A. It offers the techniques to assess adequacy of each security control. CNSSI 1260: It provides guidance to organizations with the characterization of their information and information systems. NIST 800-37, Revision 1: It defines the certification and accreditation (C & A) process. The NIST 800-37, Revision 1 is a combination of DNI, DoD, and NIST.

Reveal Solution Next Question

Free CSSLP Exam Braindumps (page: 40)

QUESTION: 162

Explanation:

QUESTION: 163

Explanation:

QUESTION: 164

Explanation:

QUESTION: 165 DRAG DROP

Explanation: