There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event

1. A. Acceptance
2. B. Enhance
3. C. Share
4. D. Exploit

Correct Answer: A

Which of the following refers to a process that is used for implementing information security

1. A. Classic information security model
2. B. Certification and Accreditation (C&A)
3. C. Information Assurance (IA)
4. D. Five Pillars model

Correct Answer: B

Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart

1. A. Risk response plan
2. B. Quantitative analysis
3. C. Risk response
4. D. Contingency reserve

Correct Answer: D

Which of the following acts promote a risk-based policy for cost effective security Each correct answer represents a part of the solution. Choose all that apply.

1. A. Clinger-Cohen Act
2. B. Lanham Act
3. C. Paperwork Reduction Act (PRA)
4. D. Computer Misuse Act

Correct Answer: AC

What NIACAP certification levels are recommended by the certifier Each correct answer represents a complete solution. Choose all that apply.

1. A. Basic System Review
2. B. Basic Security Review
3. C. Maximum Analysis
4. D. Comprehensive Analysis
5. E. Detailed Analysis
6. F. Minimum Analysis

Correct Answer: BDEF