ISC CGRC Actual Free Exam Questions & Community Discussion
Which of the following is NOT a phase of the security certification and accreditation process?
Response:
Response:
Correct Answer: C
Vote an answer
According to NIST SP 800-37 Rev 2, What is step five of the Risk Management Framework (RMF) process?
Response:
Response:
Correct Answer: C
Vote an answer
Measure of confidence that the security features, practices, procedures, and architecture of an information system accurately mediates and enforces the security policy.
Response:
Response:
Correct Answer: A
Vote an answer
You are preparing to start the qualitative risk analysis process for your project. You will be relying on some organizational process assets to influence the process. Which one of the following is NOT a probable reason for relying on organizational process assets as an input for qualitative risk analysis? Response:
Correct Answer: C
Vote an answer
Which of the following best defines a general support system? Response:
Correct Answer: D
Vote an answer
Which of the following are the common roles with regard to data in an information classification program?
Each correct answer represents a complete solution. Choose all that apply.
Response:
Each correct answer represents a complete solution. Choose all that apply.
Response:
Correct Answer: A,B,D,E
Vote an answer
What is the 1st task in Security Controls Assessment; where the assessment plan is developed, reviewed, and approved to assess the controls?
Response:
Response:
Correct Answer: A
Vote an answer
Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management?
Response:
Response:
Correct Answer: D
Vote an answer
Which of the following RMF phases is known as risk analysis? Response:
Correct Answer: C
Vote an answer
Which of the following C&A professionals plays the role of an advisor? Response:
Correct Answer: A
Vote an answer
What is the MOST appropriate action to take after weaknesses or deficiencies in controls are corrected? Response:
Correct Answer: D
Vote an answer
A System Owner (SO) is implementing a new system with their existing organization Information Technology (IT) environment. What objectives are considered when determining possible impact to risk? Response:
Correct Answer: A
Vote an answer
0
0
0
10