CGRC 試験問題を無料オンラインアクセス

Disclosure of information to unauthorized persons, or a violation of the security policy of a system in which an unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object may have occurred.
Response:

• A.Configuration
• B.Continuity
• C.Compromise
• D.Contingency

Which of the following statements correctly describes DIACAP residual risk? Response:

• A.It is the remaining risk to the information system after risk palliation has occurred.
• B.It is the technical implementation of the security design.
• C.It is a process of security authorization.
• D.It is used to validate the information system.

The tiers of the NIST RMF are
Response:

• A.Prevention, detection, recovery.
• B.Confidentiality, integrity, availability.
• C.Operational, management, system.
• D.Organization, mission/business process, information system.

Which of the following acts promote a risk-based policy for cost effective security? Each correct answer represents a part of the solution. Choose all that apply.
Response:

• A.Computer Misuse Act
• B.Lanham Act
• C.Paperwork Reduction Act (PRA)
• D.Clinger-Cohen Act

Which of the following are phases of the National Institute of Standards and Technology (NIST) Risk Management Framework?
Response:

• A.Assess, mitigate, authorize, monitor
• B.Categorize, select, implement, authorize
• C.Assess, certify, accredit, manage
• D.Prepare, execute, authorize, monitor