ISC CGRC Premium Exam Engine pdf - Download Free Updated 725 Questions
Verified CGRC Bundle Real Exam Dumps PDF
NEW QUESTION # 146
Which law was superseded by FISMA?
The law required that systems processing federal data be authorized to process by a management official, and failure to do so will constitutes a violation of a federal directive.
Response:
- A. Computer security Act of 1987
- B. FIPS 102, 1983
- C. Clinger-Cohen Act of 1996
- D. OMB Circular A-130
Answer: C
NEW QUESTION # 147
A situation in which an information system or application receives protection from security controls (or portions of security controls) that are developed, implemented, assessed, authorized, and monitored by entities other than those responsible for the system or application; entities either internal or external to the organization where the system or application resides.
Response:
- A. System-Specific Security Control
- B. Security Control Inheritance
- C. Hybrid Security Controls
- D. Network Security Controls
Answer: B
NEW QUESTION # 148
The overall length of time an information system's components can be in the recovery phase before negatively impacting the organization's mission or mission/business functions.
Response:
- A. Disaster Recovery Plan (DRP)
- B. Maximum Tolerable Downtime (MTD)
- C. Recovery Time Objective (RTO)
- D. System of Records Notice (SRN)
Answer: C
NEW QUESTION # 149
In which of the following phases does the SSAA maintenance take place? Response:
- A. Phase 3
- B. Phase 2
- C. Phase 4
- D. Phase 1
Answer: C
NEW QUESTION # 150
Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the security posture of a system or site?
Response:
- A. DITSCAP
- B. NSA-IAM
- C. NIACAP
- D. ASSET
Answer: C
NEW QUESTION # 151
Office of Management and Budget (OMB) works directly for? Response:
- A. Black house Staff
- B. White house Staff
- C. None of These
- D. Without Staff
Answer: B
NEW QUESTION # 152
Which NIST SP series document is concerned with continuous monitoring for federal information systems and organizations?
Response:
- A. SP 800-64
- B. SP 800-144
- C. SP 800-26
- D. SP 800-137
Answer: D
NEW QUESTION # 153
Which of the following individuals is responsible for configuration management and control task?
Response:
- A. Common control provider
- B. Authorizing official
- C. Information system owner
- D. Chief information officer
Answer: C
NEW QUESTION # 154
The authorization decision may carry restrictions on system operation and caveats that must be followed to maintain the authorization, and other information as determined by the organization including:
Response:
- A. all of the above
- B. Terms and conditions for the authorization
- C. Events that may trigger a review of the authorization decision
- D. The impact level supported by common controls
Answer: A
NEW QUESTION # 155
The ability of an information system to continue to: (i) operate under adverse conditions or stress, even if in a degraded or debilated state, while maintaining essential operational capabilities; and (ii) recover to an effective operational posture in a time frame consistent with mission needs.
Response:
- A. Information System Owner
- B. Information System Resilience
- C. Authorizing Official
- D. Large Scale Integration
Answer: B
NEW QUESTION # 156
Risks with low ratings of probability and impact are included on a ____ for future monitoring.
Response:
- A. Risk register
- B. Risk alarm
- C. Observation list
- D. Watchlist
Answer: D
NEW QUESTION # 157
Management wants you to create a visual diagram of what resources will be utilized in the project deliverables. What type of a chart is management asking you to create? Response:
- A. Work breakdown structure
- B. Roles and responsibility matrix
- C. RACI chart
- D. Resource breakdown structure
Answer: D
NEW QUESTION # 158
Security controls that can support multiple information systems efficiently and effectively as a common capability.
Their implementation results in a security capability that is inheritable by multiple information systems; such as Network boundary defense, management constraints, personnel security, security of physical structures, etc..
Response:
- A. Inherited Control
- B. Common Controls Provider
- C. Security Controls
- D. Common Controls
Answer: D
NEW QUESTION # 159
Which NIST SP describes various sensitivity rankings for federal systems; Guide for Developing Security Plans for Federal Info Systems?
Response:
- A. NIST SP 800-18
- B. NIST SP 800-20
- C. NIST SP 800-15
- D. NIST SP 800-19
Answer: A
NEW QUESTION # 160
Which of the following NIST Special Publication documents provides a guideline on questionnaires and checklists through which systems can be evaluated for compliance against specific control objectives? Response:
- A. NIST SP 800-53A
- B. NIST SP 800-37
- C. NIST SP 800-60
- D. NIST SP 800-59
- E. NIST SP 800-26
- F. NIST SP 800-53
Answer: A
NEW QUESTION # 161
......
Pass Your ISC Exam with CGRC Exam Dumps: https://pdfexamfiles.actualtestsquiz.com/CGRC-test-torrent.html
