Which of the following groups represents the most likely source of an asset loss through the inappropriate use of computers?
Response:

• A.Customers
• B.Employees
• C.Visitors
• D.Hackers

Comment: *

Name: *

Email: *

Verification: *

What publication provides a wide range of security controls as a basis for mitigation measures?
Response:

• A.NIST SP 800-37
• B.NIST SP 800-39
• C.NIST SP 800-53
• D.NIST SP 800-60

Comment: *

Name: *

Email: *

Verification: *

Step 7 of the risk management framework can be described as:
Response:

• A.The authorization phase of the system authorization plan
• B.The pre-certification phase of the system authorization plan
• C.The post-authorization phase of the system authorization plan
• D.The certification phase of the system authorization plan

Comment: *

Name: *

Email: *

Verification: *

When attempting to categorize a system, which two RMF starting point inputs should be accounted for? Response:

• A.Federal laws and OMB policies
• B.Federal laws and organizational policies
• C.FISMA and the Privacy Act
• D.Architecture descriptions and organizational inputs

Comment: *

Name: *

Email: *

Verification: *

Which NIST SP provides a provides a security control catalog for systems at each level, Security and Privacy Controls for Federal Information Systems and Organizations.
Response:

• A.NIST SP 800-53
• B.NIST SP 800-37
• C.NIST SP 800-40
• D.NIST SP 800-60

Comment: *

Name: *

Email: *

Verification: *