1.NIST SP 800-53 covers a vast number and type of security controls throughout the management, operational and ___________ domains. (Fill in the blank).<\/p>\n
2. By definition an assessment is the testing\/evaluation and the extent of: (Choose 3). <\/p>\n
Group of answer choicesSecurity Controls
\nConfidentiality
\nCorrectly implementing
\nProducing the desired outcome
\nInfrastructure<\/p>\n
3. The purpose of the risk assessment component is to identify what? (Choose 3). <\/p>\n
Group of answer choicesVulnerabilities
\nLikelihood of harm
\nRules
\nThreats
\nStrategy<\/p>\n
4. What law that was passed requires all federal agencies to conduct reviews and accreditations for their information systems? <\/p>\n
Group of answer choicesFederal Info System Management Act
\nSarbanes-Oxley Act
\nUSA Patriot Act
\nFIPS-197<\/p>\n
5. Who approves Federal Information Processing Standards (FIPS)?
\nGroup of answer choicesSecretary of Commerce
\nDepartment of Defense
\nPublic Law
\nCommittee on National Security Systems
\nCERT\n<\/p>\n
6. Which FIPS addresses the task to develop standards for categorization? <\/p>\n
Group of answer choicesFIPS 199
\nFIPS 202
\nFIPS 200
\nFederal Agencies<\/p>\n
7. Plans of Action and Milestones (POAMS) contain Weaknesses, Resources, Completion Date, Changes, Current Status, and _______________. (Fill in the blank).<\/p>\n
8. The ICD 503 has many focus points but for Vulnerability Assessment the initial evaluation analysis steps conclude with a vulnerability assessment to identify the? <\/p>\n
Group of answer choicesResidual Risk
\nTest
\nAccess
\nSystem<\/p>\n
9. FedRAMP developed risk management program focused on security for ______-based systems. (Fill in the blank).<\/p>\n
10. In the Risk Management Framework, the step after Authorization is?<\/p>\n
Group of answer choicesMonitoring
\nPreparation
\nAssessing
\nCategorization<\/p>\n
11. In the RMF\u2019s Preparation Phase, what requires increased levels of protection in an organization?<\/p>\n
Group of answer choicesHigh Value Assets
\nCybersecurity Initiatives
\nAuthorization
\nNetworks<\/p>\n
12. In the RMF\u2019s Categorization Phase, choose the documents needed to help complete the goal of Categorization. (Choose 3)<\/p>\n
Group of answer choicesBudgets
\nSystem Security Plans
\nPotential Impacts from a security compromise
\nNotes
\nInterviews<\/p>\n
13. When conducting an Assessment, the questions that are answered for controls are: Implemented Correctly, __________________, and Producing the Desired Outcome. <\/p>\n
14. The 3 documents included in the Authorization Package are the System Security Plan, Security Assessment Report and the? <\/p>\n
Group of answer choicesPOAM
\nContinuous Diagnostic and Mitigation Plan
\nMaintenance Plan
\nPersonnel Security Plan<\/p>\n
15. If you had conflicting guidance by NIST and Congress\/OMB authorities, which should you follow?<\/p>\n
Group of answer choicesCongress\/OMB
\nNIST
\nNo answer text provided.
\nNo answer text provided.<\/p>\n
16.Give your description of risk management without quoting NIST 800-37\u2019s definition.<\/p>\n
17. From the book, Security Controls Evaluation, Testing and Assessment Handbook, 2nd Edition, name 3 statutory or regulatory laws and tell a short summary about each one.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
1.NIST SP 800-53 covers a vast number and type of security controls throughout the management, operational and ___________ domains. (Fill in the blank). 2. By definition an assessment is the testing\/evaluation and the extent of: (Choose 3). Group of answer choicesSecurity Controls Confidentiality Correctly implementing Producing the desired outcome Infrastructure 3. The purpose of the […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":[],"disciplines":[211],"paper_types":[],"tagged":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/questions\/1031"}],"collection":[{"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/questions"}],"about":[{"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/types\/questions"}],"author":[{"embeddable":true,"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/comments?post=1031"}],"version-history":[{"count":0,"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/questions\/1031\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/media?parent=1031"}],"wp:term":[{"taxonomy":"disciplines","embeddable":true,"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/disciplines?post=1031"},{"taxonomy":"paper_types","embeddable":true,"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/paper_types?post=1031"},{"taxonomy":"tagged","embeddable":true,"href":"https:\/\/www.goodacademic.com\/blog\/wp-json\/wp\/v2\/tagged?post=1031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}