Brilliant CAP Exam Dumps Get CAP Dumps PDF [Q133-Q155]

NEW QUESTION 133
BS 7799 is an internationally recognized ISM standard that provides high level, conceptual recommendations on enterprise security. BS 7799 is basically divided into three parts. Which of the following statements are true about BS 7799?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 134
The Project Risk Management knowledge area focuses on which of the following processes?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 135
Harry is the project manager of the MMQ Construction Project. In this project Harry has identified a supplier who can create stained glass windows for 1,000 window units in the construction project. The supplier is an artist who works by himself, but creates windows for several companies throughout the United States.
Management reviews the proposal to use this supplier and while they agree that the supplier is talented, they do not think the artist can fulfill the 1,000 window units in time for the project’s deadline. Management asked Harry to find a supplier who will guarantee the completion of the windows by the needed date in the schedule.
What risk response has management asked Harry to implement?

NEW QUESTION 136
Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?

NEW QUESTION 137
Neil works as a project manager for SoftTech Inc. He is working with Tom, the COO of his company, on several risks within the project. Tom understands that through qualitative analysis Neil has identified many risks in the project. Tom’s concern, however, is that the priority list of these risk events are sorted in “high-risk,” “moderate-risk,” and “low-risk” as conditions apply within the project. Tom wants to know that is there any other objective on which Neil can make the priority list for project risks. What will be Neil’s reply to Tom?

NEW QUESTION 138
Which of the following guidance documents is useful in determining the impact level of a particular threat on agency systems?

NEW QUESTION 139
Billy is the project manager of the HAR Project and is in month six of the project. The project is scheduled to last for 18 months. Management asks Billy how often the project team is participating in risk reassessment in this project. What should Billy tell management if he’s following the best practices for risk management?

NEW QUESTION 140
Which of the following approaches can be used to build a security program?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 141
Jenny is the project manager of the NHJ Project for her company. She has identified several positive risk events within the project and she thinks these events can save the project time and money. You, a new team member wants to know that how many risk responses are available for a positive risk event. What will Jenny reply to you?

NEW QUESTION 142
Information risk management (IRM) is the process of identifying and assessing risk, reducing it to an acceptable level, and implementing the right mechanisms to maintain that level. What are the different categories of risk?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 143
Which of the following individuals is responsible for the final accreditation decision?

NEW QUESTION 144
Information Security management is a process of defining the security controls in order to protect information assets. What are the security management responsibilities?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 145
Joan is a project management consultant and she has been hired by a firm to help them identify risk events within the project. Joan would first like to examine the project documents including the plans, assumptions lists, project files, and contracts. What key thing will help Joan to discover risks within the review of the project documents?

NEW QUESTION 146
What are the responsibilities of a system owner?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 147
Which of the following processes is described in the statement below?
“It is the process of implementing risk response plans, tracking identified risks, monitoring residual risk, identifying new risks, and evaluating risk process effectiveness throughout the project.”

NEW QUESTION 148
An organization monitors the hard disks of its employees’ computers from time to time. Which policy does this pertain to?

NEW QUESTION 149
The Project Risk Management knowledge area focuses on which of the following processes?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 150
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199.
What levels of potential impact are defined by FIPS 199?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 151
Amy is the project manager for her company. In her current project the organization has a very low tolerance for risk events that will affect the project schedule. Management has asked Amy to consider the affect of all the risks on the project schedule. What approach can Amy take to create a bias against risks that will affect the schedule of the project?

NEW QUESTION 152
The Software Configuration Management (SCM) process defines the need to trace changes, and the ability to verify that the final delivered software has all of the planned enhancements that are supposed to be included in the release. What are the procedures that must be defined for each software project to ensure that a sound SCM process is implemented?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 153
In which of the following phases of the DITSCAP process does Security Test and Evaluation (ST&E) occur?

NEW QUESTION 154
Which of the following are included in Physical Controls?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 155
Which of the following NIST C&A documents is the guideline for identifying an information system as a National Security System?