最新的ISC Certified in Governance Risk and Compliance - CGRC免費考試真題
Significant changes to a system may trigger an event-driven authorization action which may include by are not limited to all of the following except one. Choose the exception.
Response:
Response:
正確答案: F
Which of the following is used to indicate that the software has met a defined quality level and is ready for mass distribution either by electronic means or by physical media? Response:
正確答案: B
Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?
Response:
Response:
正確答案: D
Sensitivity of a system based on the _________ processed, stored, and transmitted by the system.
Response:
Response:
正確答案: A
Which of the following NIST Special Publication documents provides a guideline on network security testing?
Response:
Response:
正確答案: A
FIPS 199, Standards for Security Categorization of Federal Systems defines which 3 Security Categories? Response:
正確答案: C
What is the objective of the Security Accreditation Decision task? Response:
正確答案: D
What roles and responsibilities can only be occupied by a government employee? Response:
正確答案: B
Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system. Synonymous with security controls and safeguards.
Response:
Response:
正確答案: C
Can a value of not applicable be assigned to any security objective in the context of establishing a security category for an information system.
Response:
Response:
正確答案: B
Which of the following organizational officials have the primary responsibility for putting together the authorization package?
Response:
Response:
正確答案: A
What is Step 6?
Response:
Response:
正確答案: C