NEW QUESTION 1
John works as a security engineer for BlueWell Inc. He wants to identify the different functions that the system will need to perform to meet the documented missionbusiness needs. Which of the following processes will John use to achieve the task

• A. Modes of operation
• B. Performance requirement
• C. Functional requirement
• D. Technical performance measures

Answer: C

NEW QUESTION 2
Which of the following acts is endorsed to provide a clear statement of the proscribed activity concerning computers to the law enforcement community, those who own and operate computers, and those tempted to commit crimes by unauthorized access to
computers

• A. Computer Fraud and Abuse Act
• B. Government Information Security Reform Act (GISRA)
• C. Computer Security Act
• D. Federal Information Security Management Act (FISMA)

Answer: A

NEW QUESTION 3
You work as a systems engineer for BlueWell Inc. You want to protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. Which of the following processes will you use to accomplish the task

• A. Information Assurance (IA)
• B. Risk Management
• C. Risk Analysis
• D. Information Systems Security Engineering (ISSE)

Answer: A

NEW QUESTION 4
Which of the following Registration Tasks sets up the business or operational functional description and system identification

• A. Registration Task 2
• B. Registration Task 1
• C. Registration Task 3
• D. Registration Task 4

Answer: B

NEW QUESTION 5
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls are tested and reviewed

• A. Level 4
• B. Level 5
• C. Level 1
• D. Level 2
• E. Level 3

Answer: A

NEW QUESTION 6
Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the information system. Which of the following phases of NIST SP 800-37 C&A methodology will define the above task

• A. Security Certification
• B. Security Accreditation
• C. Initiation
• D. Continuous Monitoring

Answer: D

NEW QUESTION 7
Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection mechanism

• A. Internet Key Exchange (IKE) Protocol
• B. SMIME
• C. Internet Protocol Security (IPSec)
• D. Secure Socket Layer (SSL)

Answer: C

NEW QUESTION 8
Which of the following federal agencies has the objective to develop and promote measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life

• A. National Institute of Standards and Technology (NIST)
• B. National Security Agency (NSA)
• C. Committee on National Security Systems (CNSS)
• D. United States Congress

Answer: A

NEW QUESTION 9
Which of the following CNSS policies describes the national policy on controlled access protection

• A. NSTISSP N
• B. 101
• C. NSTISSP N
• D. 200
• E. NCSC N
• F. 5
• G. CNSSP N
• H. 14

Answer: B

NEW QUESTION 10
Which of the following roles is also known as the accreditor

• A. Data owner
• B. Chief Information Officer
• C. Chief Risk Officer
• D. Designated Approving Authority

Answer: D

NEW QUESTION 11
Which of the following DoD policies establishes policies and assigns responsibilities to achieve DoD IA through a defense-in-depth approach that integrates the capabilities of personnel, operations, and technology, and supports the evolution to network-centric warfare

• A. DoD 8500.2 Information Assurance Implementation
• B. DoD 8510.1-M DITSCAP
• C. DoDI 5200.40
• D. DoD 8500.1 Information Assurance (IA)

Answer: D

NEW QUESTION 12
Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting classified information

• A. Type III cryptography
• B. Type III (E) cryptography
• C. Type II cryptography
• D. Type I cryptography

Answer: D

NEW QUESTION 13
Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls

• A. IATO
• B. DATO
• C. ATO
• D. IATT

Answer: A

NEW QUESTION 14
Which of the following are the phases of the Certification and Accreditation (C&A) process Each correct answer represents a complete solution. Choose two.

• A. Auditing
• B. Initiation
• C. Continuous Monitoring
• D. Detection

Answer: BC

NEW QUESTION 15
Which of the following cooperative programs carried out by NIST provides a nationwide network of local centers offering technical and business assistance to small manufacturers

• A. NIST Laboratories
• B. Advanced Technology Program
• C. Manufacturing Extension Partnership
• D. Baldrige National Quality Program

Answer: C

NEW QUESTION 16
Fill in the blanks with an appropriate phrase. A is an approved build of the product, and can be a single component or a combination of components.

• A. development baseline

Answer: A

NEW QUESTION 17
Which of the following cooperative programs carried out by NIST encourages performance excellence among U.S. manufacturers, service companies, educational institutions, and healthcare providers

• A. Manufacturing Extension Partnership
• B. Baldrige National Quality Program
• C. Advanced Technology Program
• D. NIST Laboratories

Answer: B

NEW QUESTION 18
Which of the following individuals informs all C&A participants about life cycle actions, security requirements, and documented user needs

• A. User representative
• B. DAA
• C. Certification Agent
• D. IS program manager

Answer: D

NEW QUESTION 19
Which of the following tasks prepares the technical management plan in planning the technical effort

• A. Task 10
• B. Task 9
• C. Task 7
• D. Task 8

Answer: B