Online Access Free CA1-001 Practice Test

Which of the following is an XML-based framework developed by OASIS and used to exchange user, resource and service provisioning information between cooperating organizations?

• A.SPML
• B.SAML
• C.XACML
• D.SOAP

SDLC phases include a minimum set of security tasks that are required to effectively incorporate security in the system development process. Which of the following are the key security activities for the development/acquisition phase?
Each correct answer represents a complete solution. Choose two.

• A.Initial delineation of business requirements in terms of confidentiality, integrity, and availability
• B.Conduct the risk assessment and use the results to supplement the baseline security controls
• C.Prepare initial documents for system certification and accreditation
• D.Determination of privacy requirements

Cloud computing is best described as which of the following?

• A.Distributed virtualized servers
• B.Distributed load balanced servers
• C.Large scale distributed computing
• D.Delivering software as a service

Which of the following statements are true about Continuous Monitoring? Each correct answer represents a complete solution. Choose all that apply.

• A.Continuous monitoring in any system takes place after initial system security accreditation.
• B.It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation.
• C.It involves tracking changes to the information system that occur during its lifetime, and then determines the impact of those changes on the system security.
• D.Continuous monitoring process is used extensively in the U.S. Federal Government.

In which of the following can a user access resources according to his role in the organization?

• A.Mandatory Access Control
• B.Network-based access control
• C.Role-based access control
• D.Discretionary access control