The monitoring frequency for each security control is based on which of the following?

• A.Decisions of the SCA
• B.None of the above
• C.Response:
• D.Organizational continuous monitoring strategy
• E.Authorization limit date

Comment: *

Name: *

Email: *

Verification: *

What is the 2nd SDLC phase; which maps to the RMF steps 3 & 4 (Implement, Assess)?
Response:

• A.Development/Acquisition
• B.Mission/business process
• C.Operation/Maintenance
• D.Criticality/Sensitivity

Comment: *

Name: *

Email: *

Verification: *

Which NIST publication is the Guide to applying RMF in Federal Info Systems a Security Life cycle approach & moved process from four phase certification & accreditation approach to emphasis risk management in a 6 step authorization process.
Response:

• A.NIST SP 800-40
• B.NIST SP 800-39
• C.NIST SP 800-53
• D.NIST SP 800-37

Comment: *

Name: *

Email: *

Verification: *

Which Certification Level of Effort is indicated by exercise-based and independent assessments?
Response:

• A.Moderate
• B.Medium
• C.High
• D.Low

Comment: *

Name: *

Email: *

Verification: *

Which SDLC phase can use the System Authorization package to assist with decommissioning tasks for an IS?
Response:

• A.Operation
• B.Authorization
• C.Remediation
• D.Disposition

Comment: *

Name: *

Email: *

Verification: *