CAP Certification Overview - [Feb 18, 2022] Latest CAP PDF Dumps
The Best ISC CAP Study Guides and Dumps of 2022
Security Controls Selection (15%):
- Develop a monitoring strategy for security control;
- Classify and document inherited and baseline controls;
- Choose and modify security controls – This covers the skills in determining the relevant use of overlays and applicability of the recommended baseline. It also covers the ability of documenting the applicability of security control;
- Appraise and endorse a security plan.
How to book CAP Exam
Register for Certified Authorization Professional (CAP) Certification Exam on Pearson VUE
Career Opportunities
(ISC)2 grants many possibilities for those who succeed in the CAP certification test. Thus, with the associated certificate, you can take up the job titles of a Cybersecurity Engineer, a Cybersecurity Analyst, an Information Security Analyst, a Chief Information Security Officer, an Information Assurance Manager, an Information Security Manager, and an Information Systems Analyst, among others. The average salary outlook for these positions is $105,000 per annum, which means that you can expect a good income.
NEW QUESTION 16
Mary is the project manager of the HGH Project for her company. She and her project team have agreed that if the vendor is late by more than ten days they will cancel the order and hire the NBG Company to fulfill the order. The NBG Company can guarantee orders within three days, but the costs of their products are significantly more expensive than the current vendor. What type of a response strategy is this?
- A. Contingent response strategy
- B. Internal risk management strategy
- C. Expert judgment
- D. External risk response
Answer: A
Explanation:
Section: Volume B
NEW QUESTION 17
What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process?
Each correct answer represents a complete solution. Choose all that apply.
- A. Conduct activities related to the disposition of the system data and objects.
- B. Execute and update IA implementation plan.
- C. Combine validation results in DIACAP scorecard.
- D. Conduct validation activities.
Answer: B,C,D
NEW QUESTION 18
David is the project manager of HGF project for his company. David, the project team, and several key stakeholders have completed risk identification and are ready to move into qualitative risk analysis. Tracy, a project team member, does not understand why they need to complete qualitative risk analysis. Which one of the following is the best explanation for completing qualitative risk analysis?
- A. Qualitative risk analysis helps segment the project risks, create a risk breakdown structure, and create fast and accurate risk responses.
- B. It is a rapid and cost-effective means of establishing priorities for the plan risk responses and lays the foundation for quantitative analysis.
- C. It is a cost-effective means of establishing probability and impact for the project risks.
- D. All risks must pass through quantitative risk analysis before qualitative risk analysis.
Answer: B
NEW QUESTION 19
Which of the following roles is also known as the accreditor?
- A. Data owner
- B. Chief Information Officer
- C. Designated Approving Authority
- D. Chief Risk Officer
Answer: C
NEW QUESTION 20
Which of the following persons is responsible for testing and verifying whether the security policy is properly implemented, and the derived security solutions are adequate or not?
- A. Data owner
- B. Auditor
- C. Data custodian
- D. User
Answer: B
NEW QUESTION 21
You are the project manager of the GHY project for your organization. You are about to start the qualitative risk analysis process for the project and you need to determine the roles and responsibilities for conducting risk management. Where can you find this information?
- A. Risk register
- B. Staffing management plan
- C. Risk management plan
- D. Enterprise environmental factors
Answer: C
NEW QUESTION 22
Which of the following is not a part of Identify Risks process?
- A. Cause and effect diagram
- B. Decision tree diagram
- C. Influence diagram
- D. System or process flow chart
Answer: B
NEW QUESTION 23
Which one of the following is the only output for the qualitative risk analysis process?
- A. Organizational process assets
- B. Risk register updates
- C. Project management plan
- D. Enterprise environmental factors
Answer: B
Explanation:
Section: Volume D
NEW QUESTION 24
Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?
- A. The Change Manager
- B. The IT Security Manager
- C. The Service Level Manager
- D. The Configuration Manager
Answer: B
NEW QUESTION 25
Which of the following DoD directives is referred to as the Defense Automation Resources Management Manual?
- A. DoD 7950.1-M
- B. DoD 5200.1-R
- C. DoDD 8000.1
- D. DoD 8910.1
- E. DoD 5200.22-M
Answer: A
Explanation:
Section: Volume D
NEW QUESTION 26
What component of the change management system is responsible for evaluating, testing, and documenting changes created to the project scope?
- A. Scope Verification
- B. Configuration Management System
- C. Integrated Change Control
- D. Project Management InformationSystem
Answer: B
NEW QUESTION 27
To help review or design security controls, they can be classified by several criteria. One of these criteria is based on nature. According to this criteria, which of the following controls consists of incident response processes, management oversight, security awareness, and training?
- A. Compliance control
- B. Procedural control
- C. Physical control
- D. Technical control
Answer: B
NEW QUESTION 28
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase?
Each correct answer represents a complete solution. Choose all that apply.
- A. Security operations
- B. Maintenance of the SSAA
- C. Continue to review and refine the SSAA
- D. System operations
- E. Change management
- F. Compliance validation
Answer: A,B,D,E,F
NEW QUESTION 29
Which of the following relations correctly describes total risk?
- A. Total Risk = Viruses x Exploit x Asset Value
- B. Total Risk = Threats x Vulnerability x Asset Value
- C. Total Risk = Threats x Exploit x Asset Value
- D. Total Risk = Viruses x Vulnerability x Asset Value
Answer: B
Explanation:
Section: Volume D
NEW QUESTION 30
What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process?
Each correct answer represents a complete solution. Choose all that apply.
- A. Assemble DIACAP team.
- B. Register system with DoD Component IA Program.
- C. Assign IA controls.
- D. Develop DIACAP strategy.
- E. Initiate IA implementation plan.
- F. Conduct validation activity.
Answer: A,B,C,D,E
NEW QUESTION 31
Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident?
- A. Preventive controls
- B. Safeguards
- C. Detective controls
- D. Corrective controls
Answer: D
NEW QUESTION 32
Which of the following refers to an information security document that is used in the United
States Department of Defense (DoD) to describe and accredit networks and systems?
- A. FIPS
- B. TCSEC
- C. SSAA
- D. FITSAF
Answer: C
NEW QUESTION 33
Which of the following is NOT considered an environmental threat source?
- A. Chemical
- B. Pollution
- C. Water
- D. Hurricane
Answer: D
Explanation:
Section: Volume B
NEW QUESTION 34
......
Valid CAP Exam Updates - 2022 Study Guide: https://www.pass4training.com/CAP-pass-exam-training.html
Top ISC CAP Exam Audio Study Guide! Practice Questions Edition: https://drive.google.com/open?id=1UWGhjZgSiUvj4Ix-CdG9-17guwm2q-JS
