Q1. Which of the following documents were developed by NIST for conducting Certification & Accreditation (C&A) Each correct answer represents a complete solution. Choose all that apply.
A.NIST Special Publication 800-59
B. NIST Special Publication 800-60
C. NIST Special Publication 800-37A
D. NIST Special Publication 800-37
E. NIST Special Publication 800-53
F. NIST Special Publication 800-53A
Correct Answer: A, B, D, E, F
Q2. Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system
A.SSAA
B. TCSEC
C. FIPS
D. FITSAF
Correct Answer: B
Q3. In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199 Each correct answer represents a complete solution. Choose all that apply.
A.High
B. Medium
C. Low
D. Moderate
Correct Answer: A, B, C
Q4. There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event
A.Acceptance
B. Enhance
C. Share
D. Exploit
Correct Answer: A
Q5. You have been tasked with finding an encryption methodology that will encrypt most types of email attachments. The requirements are that your solution must use the RSA algorithm. Which of the following is your best choice
A.PGP
B. SMIME
C. DES
D. Blowfish
Correct Answer: B
$ 39
Reviews
There are no reviews yet.