CAP Free Practice Test

Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?

1. A. Information system owner
2. B. Authorizing Official
3. C. Chief Risk Officer (CRO)
4. D. Chief Information Officer (CIO)

Correct Answer: A

The phase 0 of Risk Management Framework (RMF) is known as strategic risk assessment planning. Which of the following processes take place in phase 0?
Each correct answer represents a complete solution. Choose all that apply.

1. A. Review documentation and technical data.
2. B. Apply classification criteria to rank data assets and related IT resources.
3. C. Establish criteria that will be used to classify and rank data assets.
4. D. Identify threats, vulnerabilities, and controls that will be evaluated.
5. E. Establish criteria that will be used to evaluate threats, vulnerabilities, and controls.

Correct Answer: BCDE

Which of the following documents is used to provide a standard approach to the assessment of NIST SP 800-53 security controls?

1. A. NIST SP 800-53A
2. B. NIST SP 800-66
3. C. NIST SP 800-41
4. D. NIST SP 800-37

Correct Answer: A

You and your project team have identified the project risks and now are analyzing the probability and impact of the risks. What type of analysis of the risks provides a quick and high-level review of each identified risk event?

1. A. Qualitative risk analysis
2. B. Seven risk responses
3. C. Quantitative risk analysis
4. D. A risk probability-impact matrix

Correct Answer: A

Ned is the project manager of the HNN project for your company. Ned has asked you to help him complete some probability distributions for his project. What portion of the project will you most likely use for probability distributions?

1. A. Uncertainty in values such as duration of schedule activities
2. B. Bias towards risk in new resources
3. C. Risk probabilityand impact matrixes
4. D. Risk identification

Correct Answer: A