The correct answer is DITSCAP, the Defense Information Technology Security
Certification and Accreditation Process.
* Answer NIACAP refers to the US government's non-defense Certification and
Accreditation (C&A) process the National Information Assurance Certification and
Accreditation Process.
* CIAP refers to the Commercial Information Security Analysis Process that is currently under development for application to commercial systems.
* Answer DIACAP is a distracter.

With mandatory controls, only administrators and not owners of resources may make decisions that bear on or derive from policy. Only an administrator may change the category of a resource, and no one may grant a right of access that is explicitly forbidden in the access control policy. This kind of access control method is based on
Security labels. It is important to note that mandatory controls are prohibitive (i.e., all that is not expressly permitted is forbidden).

Multi-mode fiber has a shorter allowable maximum transmission
distance than single-mode fiber (2km vs. 10km). Multi-mode
transmits the light through several different paths in the cable,
whereas single-mode uses one light path, making single mode
perform better. However, multi-mode is less expensive to install and
is used more often in short-to-medium haul networks. Category 5
unshielded twisted pair (UTP) has a maximum transmission
distance of 100 meters. Sources: Catalyst 5000 Series Installation Guide
(Cisco Systems, 1996) and Gigabit Ethernet by Jayant Kadambi, Ian
Crayford, and Mohan Kalkunte (Prentice Hall PTR, 1998).

Explanation
Section: Security Assessment and Testing

Explanation/Reference:
Explanation:
Hearsay evidence is not normally admissible in court unless it has firsthand evidence that can be used to prove the evidence's accuracy, trustworthiness, and reliability like a business person who generated the computer logs and collected them. It is important that this person generates and collects logs as a normal part of his business and not just this one time for court. It has to be a documented process that is carried out daily. The value of evidence depends upon the genuineness and competence of the source; therefore, since record collection is not an activity likely to be performed by senior or executive management, records collected by senior or executive management are not likely to be admissible in court. Hearsay evidence is usually not admissible in court unless it meets the Business Records Exemption rule to the Hearsay evidence.
In certain instances computer records fall outside of the hearsay rule (e.g., business records

exemption)
Information relates to regular business activities

Automatically computer generated data

No human intervention

Prove system was operating correctly

Prove no one changed the data

If you have a documented business process and you make use of intrusion detection tools, log analysis tools, and you produce daily reports of activities, then the computer generated data might be admissible in court and would not be considered Hearsay Evidence.
References: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 10: Law, Investigation, and Ethics (page 676)