Which of the following RMF phases is known as risk analysis?

Which one of the following is the only output for the qualitative risk analysis process?

Harry is a project manager of a software development project. In the early stages of planning, he and the stakeholders operated with the belief that the software they were developing would work with their organization’s current computer operating system. Now that the project team has started developing the

software it has become apparent that the software will not work with nearly half of the organization’s computer operating systems. The incorrect belief Harry had in the software compatibility is an example of what in project management?

In which type of access control do user ID and password system come under?

Which of the following guidance documents is useful in determining the impact level of a particular threat on agency systems?

Which of the following are the types of assessment tests addressed in NIST SP 800-53A?

For which of the following reporting requirements are continuous monitoring documentation reports used?

A ________ points to a statement in a policy or procedure that helps determine a course of action.

Which of the following individuals makes the final accreditation decision?

Which of the following individuals is responsible for the final accreditation decision?