최신ISC Certified in Governance Risk and Compliance - CGRC무료샘플문제
문제1
What is the four-step security categorization process?
Response:
What is the four-step security categorization process?
Response:
정답: A
문제2
Which of the following system security policies is used to address specific issues of concern to the organization?
Response:
Which of the following system security policies is used to address specific issues of concern to the organization?
Response:
정답: C
문제3
An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?
Response:
An organization monitors the hard disks of its employees' computers from time to time. Which policy does this pertain to?
Response:
정답: B
문제4
During which Risk Management Framework (RMF) step is the system security plan initially approved? Response:
During which Risk Management Framework (RMF) step is the system security plan initially approved? Response:
정답: A
문제5
The official management decision given by a senior organizational official to authorize operation of an information system and to explicitly accept the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of security controls.
Response:
The official management decision given by a senior organizational official to authorize operation of an information system and to explicitly accept the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of security controls.
Response:
정답: D
문제6
Which of the following individuals is responsible for the final accreditation decision? Response:
Which of the following individuals is responsible for the final accreditation decision? Response:
정답: D
문제7
Which RMF role establishes risk management roles and responsibilities and provides advice and relevant information to authorizing officials concerning the risk management strategy to guide authorization decision making.
Response:
Which RMF role establishes risk management roles and responsibilities and provides advice and relevant information to authorizing officials concerning the risk management strategy to guide authorization decision making.
Response:
정답: C
문제8
NIST SP 800-37, Revision 1, was developed by NIST under the authority of Response:
NIST SP 800-37, Revision 1, was developed by NIST under the authority of Response:
정답: A
문제9
An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing Official?
Each correct answer represents a complete solution. Choose all that apply.
Response:
An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing Official?
Each correct answer represents a complete solution. Choose all that apply.
Response:
정답: A,B,D
문제10
When should the assessment team provide the briefing following the conclusion of testing to provide system management/operations personnel an opportunity to know the security posture and take immediate actions; 24 hrs, 48 hrs, immediately)?
Response:
When should the assessment team provide the briefing following the conclusion of testing to provide system management/operations personnel an opportunity to know the security posture and take immediate actions; 24 hrs, 48 hrs, immediately)?
Response:
정답: B
문제11
Ensuring timely and reliable access to and use of information. SP 800-53; SP 800-53A; CNSSI-
4009; SP 800-27; SP 800-60; SP 800-37; FIPS 200; FIPS 199; 44 U.S.C., Sec.
Response:
Ensuring timely and reliable access to and use of information. SP 800-53; SP 800-53A; CNSSI-
4009; SP 800-27; SP 800-60; SP 800-37; FIPS 200; FIPS 199; 44 U.S.C., Sec.
Response:
정답: C
문제12
An organizational official with statutory or operational authority for specified information and responsibility for establishing the controls for its generation, collection, processing, dissemination, and disposal is known as the:
Response:
An organizational official with statutory or operational authority for specified information and responsibility for establishing the controls for its generation, collection, processing, dissemination, and disposal is known as the:
Response:
정답: A
문제13
The Security Category that guards against the improper modification or destruction of information and includes ensuring information non-repudiation & authenticity.
Response:
The Security Category that guards against the improper modification or destruction of information and includes ensuring information non-repudiation & authenticity.
Response:
정답: D
문제14
Who initiates system authorization process and has the full responsibility over the life cycle of an information system?
Response:
Who initiates system authorization process and has the full responsibility over the life cycle of an information system?
Response:
정답: A