Fill in the blank with an appropriate phrase. A is defined as any activity that has an effect on defining, designing, building, or executing a task, requirement, or procedure.

• A.technical effort

Comment: *

Name: *

Email: *

Verification: *

Which of the following elements of the BCP process emphasizes on creating the scope and the additional elements required to define the parameters of the plan?

• A.Business continuity plan development
• B.Plan approval and implementation
• C.Business impact analysis
• D.Scope and plan initiation

Comment: *

Name: *

Email: *

Verification: *

Frank is the project manager of the NHH Project. He is working with the project team to create a plan to document the procedures to manage risks throughout the project. This document will define how risks will be identified and quantified. It will also define how contingency plans will be implemented by the project team. What document is Frank and the NHH Project team creating in this scenario?

• A.Risk management plan
• B.Project plan
• C.Project management plan
• D.Resource management plan

Comment: *

Name: *

Email: *

Verification: *

Which of the following rated systems of the Orange book has mandatory protection of the TCB?

• A.A-rated
• B.B-rated
• C.D-rated
• D.C-rated

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
Drag and drop the appropriate principle documents in front of their respective functions.

Correct Answer:

The various principle documents of transformation are as follows: CNSSP 22: It establishes a national risk management policy for national security systems. CNSSI 1199: It creates the technique in which the national security community classifies the information and information systems with regard to confidentiality, integrity, and availability. CNSSI 1253: It combines DCID 6/3, DOD Instructions 8500.2, NIST SP 800-53, and other security sources into a single cohesive repository of security controls. CNSSI 1253 A.
It offers the techniques to assess adequacy of each security control. CNSSI 1260: It provides guidance to organizations with the characterization of their information and information systems. NIST 800-37, Revision 1: It defines the certification and accreditation (C & A) process. The NIST 800-37, Revision 1 is a combination of DNI, DoD, and NIST.

Comment: *

Name: *

Email: *

Verification: *