CAP Free Practice Test

In which of the following DITSCAP phases is the SSAA developed?

1. A. Phase 4
2. B. Phase 2
3. C. Phase 1
4. D. Phase 3

Correct Answer: C

Which of the following RMF phases is known as risk analysis?

1. A. Phase 0
2. B. Phase 1
3. C. Phase 2
4. D. Phase 3

Correct Answer: C

Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?

1. A. Risk response plan
2. B. Quantitative analysis
3. C. Risk response
4. D. Contingency reserve

Correct Answer: D

In which of the following phases of the DITSCAP process does Security Test and Evaluation (ST&E) occur?

1. A. Phase 2
2. B. Phase 3
3. C. Phase 1
4. D. Phase 4

Correct Answer: B

Which of the following is used in the practice of Information Assurance (IA) to define assurance requirements?

1. A. Classic information security model
2. B. Communications Management Plan
3. C. Five Pillars model
4. D. Parkerian Hexad

Correct Answer: A