Question 96

According to NIST SP 800-37 Rev 2, which role has a primary responsibility to report the security status of the information system to the authorizing official (OA) and other appropriate organizational officials on an ongoing basis in accordance with the monitoring strategy?
Response:
  • Question 97

    Which organizational official is responsible for the procurement, development, integration, modification, operation, maintenance, and disposal of an information system? Response:
  • Question 98

    An agreement that allows two organizations to back up each other.
    Response:
  • Question 99

    The objective of Configuration Manager and control is "not to" document all proposed or actual changes to an IS & to assess the impact of changes on security of system.
    Response:
  • Question 100

    What component of the change management system is responsible for evaluating, testing, and documenting changes created to the project scope?
    Response: