Which of the following processes provides a standard set of activities, general tasks, and a
management structure to certify and accredit systems, which maintain the information
assurance and the security posture of a system or site?

You work as a project manager for BlueWell Inc. You are working on a project and the
management wants a rapid and cost-effective means for establishing priorities for planning
risk responses in your project. Which risk management process can satisfy management’s
objective for your project?

Which of the following statements best describes the difference between the role of a data
owner and the role of a data custodian?

Which of the following NIST C&A documents is the guideline for identifying an information

system as a National Security System?

Which of the following system security policies is used to address specific issues of concern
to the organization?

Which of the following individuals is responsible for ensuring the security posture of the
organization’s information system?

In which of the following Risk Management Framework (RMF) phases is a risk profile
created for threats?

In which of the following DITSCAP phases is the SSAA developed?

Which of the following recovery plans includes a monitoring process and triggers for
initiating planned actions?

What does RTM stand for?