Question 1

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of
the following statements are true about ISSO and ISSE?
Each correct answer represents a complete solution. Choose all that apply.

Accepted Answer

Correct answer: ACE

Question 2

DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified
information since December 1997. What phases are identified by DIACAP?
Each correct answer represents a complete solution. Choose all that apply.

Accepted Answer

Correct answer: CDEF

Question 3

FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which
of the following FITSAF levels shows that the procedures and controls have been implemented?

Accepted Answer

Correct answer: C

Question 4

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization
Process. What are the different phases of System Authorization Plan?
Each correct answer represents a part of the solution. Choose all that apply.

Accepted Answer

Correct answer: ABDE

Question 5

Ben is the project manager of the YHT Project for his company. Alice, one of his team members, is confused about when project risks will happen in the project.
Which one of the following statements is the most accurate about when project risk happens?

Accepted Answer

Correct answer: D

Question 6

There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to the perform quantitative risk analysis process?

Accepted Answer

Correct answer: D

Question 7

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning.

100% Valid and Newest Version CAP Questions & Answers shared by Certleader
/CAP-dumps.html (395 Q&As)
Which of the following processes take place in phase 3?
Each correct answer represents a complete solution. Choose all that apply.

Accepted Answer

Correct answer: BCD

Question 8

Neil works as a project manager for SoftTech Inc. He is working with Tom, the COO of his company, on several risks within the project. Tom understands that
through qualitative analysis Neil has identified many risks in the project. Tom's concern, however, is that the priority list of these risk events are sorted in "highrisk," "moderate-risk," and "low-risk" as conditions apply within the project. Tom wants to know that is there any other objective on which Neil can make the priority
list for project risks. What will be Neil's reply to Tom?

Accepted Answer

Correct answer: D

Question 9

Your project uses a piece of equipment that if the temperature of the machine goes above 450 degree Fahrenheit the machine will overheat and have to be shut
down for 48 hours. Should this machine overheat even once it will delay the project's end date. You work with your project to create a response that should the
temperature of the machine reach 430, the machine will be paused for at least an hour to cool it down. The temperature of 430 is called what?

Accepted Answer

Correct answer: C

Question 10

James work as an IT systems personnel in SoftTech Inc. He performs the following tasks: Runs regular backups and routine tests of the validity of the backup
data.
Performs data restoration from the backups whenever required.
Maintains the retained records in accordance with the established information classification policy.
What is the role played by James in the organization?

Accepted Answer

Correct answer: D