Which of the following guidelines is recommended for engineering, protecting, managing,
processing, and controlling national security and sensitive (although unclassified) information
B
Which of the following Security Control Assessment Tasks gathers the documentation and supporting
materials essential for the assessment of the security controls in the information system
C
Which of the following professionals plays the role of a monitor and takes part in the organization's
configuration management process
C
Which of the following processes culminates in an agreement between key players that a system in
its current configuration and operation provides adequate protection controls
A
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has
been accredited in Phase 3. What are the process activities of this phase Each correct answer
represents a complete solution. Choose all that apply.
E,A,F,C,D
Which of the following email lists is written for the technical audiences, and provides weekly
summaries of security issues, new vulnerabilities, potential impact, patches and workarounds, as
well as the actions recommended to mitigate risk
C
Which of the following tasks obtains the customer agreement in planning the technical effort
B
Which of the following documents were developed by NIST for conducting Certification &
Accreditation (C&A) Each correct answer represents a complete solution. Choose all that apply.
D,E,F,A,B
Which of the following elements are described by the functional requirements task Each correct
answer represents a complete solution. Choose all that apply.
D,C, A
Which of the following documents is defined as a source document, which is most useful for the ISSE
when classifying the needed security functionality
A