To help review or design security controls, they can be classified by several criteria. One of
these criteria is based on nature. According to this criteria, which of the following controls
consists of incident response processes, management oversight, security awareness, and

training?

An Authorizing Official plays the role of an approver. What are the responsibilities of an
Authorizing Official? Each correct answer represents a complete solution. Choose all that
apply.

Jeff, a key stakeholder in your project, wants to know how the risk exposure for the risk

events is calculated during quantitative risk analysis. He is worried about the risk exposure
which is too low for the events surrounding his project requirements. How is the risk
exposure calculated?

You work as a project manager for SoftTech Inc. You are working with the project
stakeholders to begin the qualitative risk analysis process. You will need all of the following
as inputs to the qualitative risk analysis process except for which one?

What component of the change management system is responsible for evaluating, testing,
and documenting changes created to the project scope?

A project team member has just identified a new project risk. The risk event is determined to
have significant impact but a low probability in the project. Should the risk event happen it’ll
cause the project to be delayed by three weeks, which will cause new risk in the project.
What should the project manager do with the risk event?

Which of the following concepts represent the three fundamental principles of information
security? Each correct answer represents a complete solution. Choose three.

Which of the following governance bodies provides management, operational and technical
controls to satisfy security requirements?

Your organization has a project that is expected to last 20 months but the customer would
really like the project completed in 18 months. You have worked on similar projects in the
past and believe that you could fast track the project and reach the 18 month deadline.
What increases when you fast track a project?

The IAM/CA makes certification accreditation recommendations to the DAA. The DAA
issues accreditation determinations. Which of the following are the accreditation
determinations issued by the DAA? Each correct answer represents a complete solution.
Choose all that apply.