CGRC 무료 덤프문제 온라인 액세스

As indicated in NIST SP 800-37, and NIST SP 800-53 the RMF provides inputs to the risk management strategy, including: laws, directives, and policy guidance; strategic goals and objectives; information security requirements; and:
Response:

• A.Mission/business processes
• B.Segment and solution architecture
• C.FEA reference models
• D.Priorities and resources availability

In which of the following Risk Management Framework (RMF) phases is strategic risk assessment planning performed?
Response:

• A.Phase 2
• B.Phase 0
• C.Phase 3
• D.Phase 1

Information Security management is a process of defining the security controls in order to protect information assets. The first action of a management program to implement information security is to have a security program in place.
What are the objectives of a security program?
Each correct answer represents a complete solution. Choose all that apply.
Response:

• A.System classification
• B.Security education
• C.Information classification
• D.Security organization

What type of testing is the Evaluation thru operation, movement, or adjustment under specific conditions to determine control success?
Response:

• A.Inspection
• B.Organization
• C.Demonstration
• D.Examination

Five keys to successful Risk Management Program?
Response:

• A.1 - Senior management's commitment
  2 - Full support and participation IT team
  3 - Competence of the risk assessment team
  4. - An ongoing evaluation and assessment of the HR-relate mission risks 5.- User community awareness and cooperation
• B.1 - Senior managements commitment
  2 - Full support and participation IT team
  3 - Competence of the risk assessment team
  4 - User community awareness and cooperation
  5 - An ongoing evaluation and assessment of the IT-relate mission risks
• C.1 - Full support and participation IT team
  2 - Competence of the risk assessment team
  3 - User community awareness and cooperation
  4. - Senior managements commitment
  5. - An ongoing evaluation and assessment of the IT-relate mission safe.
• D.1 - Competence of the risk assessment team
  2 - User community awareness and cooperation
  3 - An ongoing evaluation and assessment of the IT-relate mission risks
  4. - Junior managements commitment
  5. - Full support and participation IT team