CAP Free Practice Test

Which of the following are included in Administrative Controls?
Each correct answer represents a complete solution. Choose all that apply.

1. A. Conducting security-awareness training
2. B. Screening of personnel
3. C. Monitoring for intrusion
4. D. Implementing change control procedures
5. E. Developing policy

Correct Answer: ABDE

Harry is the project manager of the MMQ Construction Project. In this project Harry has identified a supplier who can create stained glass windows for 1,000 window units in the construction project. The supplier is an artist who works by himself, but creates windows for several companies throughout the United States. Management reviews the proposal to use this supplier and while they agree that the supplier is talented, they do not think the artist can fulfill the 1,000 window units in time for the project's deadline. Management asked Harry to find a supplier who will guarantee the completion of the windows by the needed date in the schedule. What risk response has management asked Harry to implement?

1. A. Mitigation
2. B. Acceptance
3. C. Transference
4. D. Avoidance

Correct Answer: A

You are the project manager of the GHG project. You are preparing for the quantitative risk analysis process. You are using organizational process assets to help you complete the quantitative risk analysis process. Which one of the following is NOT a valid reason to utilize organizational process assets as a part of the quantitative risk analysis process?

1. A. You will use organizational process assets for risk databases that may be available from industry sources.
2. B. You will use organizational process assets for studies of similar projects by risk specialists.
3. C. You will use organizational process assets to determine costs of all risks events within thecurrent project.
4. D. You will use organizational process assets for information from prior similar projects.

Correct Answer: C

There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event?

1. A. Enhance
2. B. Exploit
3. C. Acceptance
4. D. Share

Correct Answer: C

Which of the following is NOT an objective of the security program?

1. A. Security organization
2. B. Security plan
3. C. Security education
4. D. Information classification

Correct Answer: B