ISC2 CAP Exam Practice Test Instant Access

Question 1

Which of the following documents is used to provide a standard approach to the assessment of NIST SP 800-53 security controls?

ANIST SP 800-53A

BNIST SP 800-66

CNIST SP 800-41

DNIST SP 800-37

Answer : A

Question 2

Which of the following individuals is responsible for configuration management and control task?

ACommon control provider

BInformation system owner

CAuthorizing official

DChief information officer

Answer : B

Question 3

A ________ points to a statement in a policy or procedure that helps determine a course of action.

AComment

BGuideline

CProcedure

DBaseline

Answer : B

Question 4

Which of the following individuals makes the final accreditation decision?

ADAA

BISSO

CCIO

DCISO

Answer : A

Question 5

Which of the following individuals is responsible for the final accreditation decision?

ACertification Agent

BUser Representative

CInformation System Owner

DRisk Executive

Answer : C

Question 6

Which of the following relations correctly describes total risk?

ATotal Risk = Threats x Vulnerability x Asset Value

BTotal Risk = Viruses x Vulnerability x Asset Value

CTotal Risk = Threats x Exploit x Asset Value

DTotal Risk = Viruses x Exploit x Asset Value

Answer : A

Question 7

Which of the following formulas was developed by FIPS 199 for categorization of an information system?

ASCinformation system = {(confidentiality, impact), (integrity, controls), (availability, risk)}

BSCinformation system = {(confidentiality, risk), (integrity, impact), (availability, controls)}

CSCinformation system = {(confidentiality, impact), (integrity, impact), (availability, impact)}

DSCinformation system = {(confidentiality, controls), (integrity, controls), (availability, controls )}

Answer : C

ISC2 Certified Authorization Professional Exam Practice Test