Overlays can be implemented as part of control tailoring. In which step of the assessment and authorization process is control tailoring done?
Response:

• A.Security Categorization
• B.Risk Assessment
• C.Privacy Impact Assessment (PIA) Step
• D.Select step

Comment: *

Name: *

Email: *

Verification: *

Which of the following guidance documents is useful in determining the impact level of a particular threat on agency systems?
Response:

• A.NIST SP 800-41
• B.NIST SP 800-14
• C.FIPS 199
• D.NIST SP 800-37

Comment: *

Name: *

Email: *

Verification: *

For inherited controls, the type of authorization that the system owner would expect from the authorizing official is:
Response:

• A.Denial Authority to operate (DATO)
• B.Authority to Operate (ATO)
• C.Authorization to use common controls
• D.Authorization to test

Comment: *

Name: *

Email: *

Verification: *

Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality?
Response:

• A.Data Classification
• B.Configuration Management
• C.Change Control
• D.Data Hiding

Comment: *

Name: *

Email: *

Verification: *

Which publication primarily targets activities in Tier 3 of Risk Management approach/pyramid?
Response:

• A.NIST SP 800-38
• B.NIST SP 800-53A
• C.NIST SP 800-37
• D.NIST SP 800-53

Comment: *

Name: *

Email: *

Verification: *