CGRC 무료 덤프문제 온라인 액세스

Which of the following is used throughout the entire C&A process? Response:

• A.DIACAP
• B.DITSCAP
• C.DAA
• D.SSAA

ISO 17799 has two parts. The first part is an implementation guide with guidelines on how to build a comprehensive information security infrastructure and the second part is an auditing guide based on requirements that must be met for an organization to be deemed compliant with ISO
17799. 4 What are the ISO 17799 domains?
Each correct answer represents a complete solution. Choose all that apply.
Response:

• A.Information security policy for the organization
• B.System development and maintenance
• C.Business continuity management
• D.System architecture management
• E.Personnel security

Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system. Safeguards may include security features, management constraints, personnel security, and security of physical structures, areas, and devices. Synonymous with security controls and countermeasures.
Response:

• A.Tailored Security
• B.Safeguards
• C.Control Baseline
• D.Subsystem

To help review or design security controls, they can be classified by several criteri

• A.Preventive controls
• B.Corrective controls
• C.Adaptive controls
• D.One of these criteria is based on time. According to this criteria, which of the following controls are intended to prevent an incident from occurring?
  Response:
• E.Detective controls

Which of the following is an official authorization decision that is focused on specific controls implemented in a defined environment of operation to support one or more systems residing within the environment?
Response:

• A.Type authorization
• B.Joint authorization
• C.Facility authorization
• D.Authority to test