Online Access Free CGRC Practice Test

What publication implements the Computer Security act and defines sensitivity? Response:

• A.OMB Circular A-136
• B.OMB Circular A-133
• C.OMB Circular A-130
• D.OMB Circular A-123

The physical surroundings in which an information system processes, stores, transmits, or disseminates information is referred to as Response:

• A.Information System
• B.IT infrastructure
• C.Environment of Operation
• D.Facility

Any information system (including any telecommunications system) used or operated by an agency or by a contractor of an agency, or other organization on behalf of an agency.
Response:

• A.System Security Authorization
• B.Information System Owner
• C.National Security System
• D.Information Security Policy

A complex system of systems composed of subsystems and services that are part of a continuously evolving, complex community of people, devices, information and services interconnected by a network that enhances information sharing and collaboration. Subsystems and services may or may not be developed or owned by the same entity, and, in general, will not be continually present during the full lifecycle of the system of systems.
Response:

• A.Industry Standard Architecture
• B.Event-Driven Architecture
• C.Federal Enterprise Architecture
• D.Net-Centric Architecture

Which of the following RMF phases identifies key threats and vulnerabilities that could compromise the confidentiality, integrity, and availability of the institutional critical assets?
Response:

• A.Phase 0
• B.Phase 1
• C.Phase 3
• D.Phase 2