Online Access Free CGRC Practice Test

Step 6 of the risk management framework can be described as:
Response:

• A.The authorization phase of the system authorization plan
• B.The post-authorization phase of the system authorization plan
• C.The pre-certification phase of the system authorization plan
• D.The certification phase of the system authorization plan

Testing officials should use which NIST publication as guide for developing test procedures?
Response:

• A.NIST SP 800-53
• B.NIST SP 800-53A
• C.NIST SP 800-39
• D.NIST SP 800-37A

You are the project manager for a construction project. The project includes a work that involves very high financial risks. You decide to insure processes so that any ill happening can be compensated. Which type of strategies have you used to deal with the risks involved with that particular work? Response:

• A.Avoid
• B.Accept
• C.Transfer
• D.Mitigate

Management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies, system failures, or disaster.
Response:

• A.Contingency Plan
• B.Incident Response Plan
• C.Operations Plan
• D.Disaster Recovery Plan

When attempting to categorize a system which two RMF starting point inputs should be accounted for and are critical input to Categorization?
Response:

• A.Federal laws and Office of Management and Budget (OMB) policies
• B.Federal Information Security Management Act (FISMA) and the Privacy Act
• C.Federal laws and organizational policies
• D.Architectural descriptions and organizational inputs