NO.265 Any telecommunications or information system that is defined as a national security system (FISMA 2002) because it processes any information the loss, misuse, disclosure, or unauthorized access to or modification of would have a debilitating impact on the mission of an agency.
Response:

NO.266 Security Test and Evaluation (ST&E) is a component of risk assessment. It is useful in discovering system vulnerabilities. For what purposes is ST&E used?
Each correct answer represents a complete solution. Choose all that apply.
Response:

NO.267 System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose all that apply.
Response:

NO.268 When carrying out ongoing risk response, the effectiveness of new, modified, enhanced, or added controls must be…
Response:

NO.269 National Institute of Standards and Technology (NIST) guidance classifies security controls as Response:

NO.270 What is the purpose for scoping guidance?
Response:

NO.271 A key part of the risk-based decision process is the recognition that regardless of the risk response, There remains some risks known as:
Response:

NO.272 Who is primarily responsible for categorizing the Information System? Response:

NO.273 The use of automation to support ongoing assessments facilitates all but one of the following.
Response:

NO.274 The primary responsibility to update authorization package documents lies on which of the following officials?
Response:

NO.275 A differential backup stores files that were created or modified since the last full backup.
Therefore, if a file is changed after the previous full backup, a differential backup will save the file each time until the next full backup is completed.
The differential backup takes less time to complete then a full backup. Restoring from a differential backup may require less media than an incremental backup because only the full backup and the last differential media would be needed.
As a disadvantage, differential backups take longer to complete than incremental backups because the amount of data since the last full backup increases each day until the next full backup is executed.
Response:

NO.276 An organizational official responsible for the development, implementation, assessment, and monitoring of security controls inherited by information systems is called…
Response:

NO.277 The person primarily responsible for RMF Step 1, Categorization.
Response:

NO.278 In which of the following phases does the SSAA maintenance take place? Response:

NO.279 What is the three-tiered approach to risk management described in NIST SP 800-37, Revision 1?
Response:

NO.280 The registration of the system directly follows which Risk Management Framework (RMF) task?
Response:

NO.281 Which of the following statements about the authentication concept of information security management is true?
Response:

NO.282 An occurrence that actually jeopardizes the CIA of an information system or the information system processes that stores or transmits information or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies.
Response:

NO.283 Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?
Response:

NO.284 An authorization approach where a single organizational official in a senior leadership position is responsible and accountable for a system or common controls is referred to as:
Response:

NO.285 What RMF artifact establishes the scope of protection for an IS and encompass people, process, and info tech that are part of the system?

NO.286 The loss of confidentiality, integrity, or availability could be expected to have a serious adverse effect on organizational operations, organizational assests, or individuals. Thus the potential impact is..
Response:

NO.287 Which of the following assessment methodologies defines a six-step technical security evaluation? Response:

NO.288 _________________________ management offers a structured approach to managing, approving, and documenting changes affecting an IS; critical to continuous assessment of security posture of IS.
Response: