You are preparing to complete the quantitative risk analysis process with your project team
and several subject matter experts. You gather the necessary inputs including the project’s
cost management plan. Why is it necessary to include the project’s cost management plan
in the preparation for the quantitative risk analysis process?

What NIACAP certification levels are recommended by the certifier? Each correct answer
represents a complete solution. Choose all that apply.

You work as a project manager for BlueWell Inc. There has been a delay in your project
work that is adversely affecting the project schedule. You decided, with your stakeholders’
approval, to fast track the project work to get the project done faster. When you fast track
the project which of the following are likely to increase?

Information Security management is a process of defining the security controls in order to
protect information assets. What are the security management responsibilities? Each
correct answer represents a complete solution. Choose all that apply.

Which of the following are included in Technical Controls? Each correct answer represents
a complete solution. Choose all that apply.

You are the project manager of the HJK project for your organization. You and the project
team have created risk responses for many of the risk events in the project. A teaming
agreement is an example of what risk response?

Penetration tests are sometimes called white hat attacks because in a pen test, the good
guys are attempting to break in. What are the different categories of penetration testing?
Each correct answer represents a complete solution. Choose all that apply.

You are the project manager for TTP project. You are in the Identify Risks process. You
have to create the risk register. Which of the following are included in the risk register? Each
correct answer represents a complete solution. Choose two.

The Software Configuration Management (SCM) process defines the need to trace

changes, and the ability to verify that the final delivered software has all of the planned
enhancements that are supposed to be included in the release. What are the procedures
that must be defined for each software project to ensure that a sound SCM process is
implemented? Each correct answer represents a complete solution. Choose all that apply.

The National Information Assurance Certification and Accreditation Process (NIACAP) is the
minimum standard process for the certification and accreditation of computer and
telecommunications systems that handle U.S. national security information. Which of the
following participants are required in a NIACAP security assessment? Each correct answer
represents a part of the solution. Choose all that apply.