Fred is the project manager of the PKL project. He is working with his project team to
complete the quantitative risk analysis process as a part of risk management planning. Fred
understands that once the quantitative risk analysis process is complete, the process will
need to be completed again in at least two other times in the project. When will the
quantitative risk analysis process need to be repeated?

You are the project manager for a construction project. The project includes a work that
involves very high financial risks. You decide to insure processes so that any ill happening
can be compensated. Which type of strategies have you used to deal with the risks involved
with that particular work?

Which of the following are included in Administrative Controls? Each correct answer
represents a complete solution. Choose all that apply.

The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain
a fully integrated system for certification testing and accreditation. What are the process
activities of this phase? Each correct answer represents a complete solution. Choose all
that apply.

You are the project manager for GHY Project and are working to create a risk response for
a negative risk. You and the project team have identified the risk that the project may not
complete on time, as required by the management, due to the creation of the user guide for
the software you’re creating. You have elected to hire an external writer in order to satisfy
the requirements and to alleviate the risk event. What type of risk response have you
elected to use in this instance?

You are the project manager of the GHQ project for your company. You are working you’re
your project team to prepare for the qualitative risk analysis process. Mary, a project team
member, does not understand why you need to complete qualitative risks analysis. You
explain to Mary that qualitative risks analysis helps you determine which risks needs
additional analysis. There are also some other benefits that qualitative risks analysis can do
for the project. Which one of the following is NOT an accomplishment of the qualitative risk
analysis process?

Mark works as a Network Administrator for NetTech Inc. He wants users to access only
those resources that are required for them. Which of the following access control models
will he use?

Which of the following are the common roles with regard to data in an information
classification program? Each correct answer represents a complete solution. Choose all that
apply.

To help review or design security controls, they can be classified by several criteria. One of
these criteria is based on nature. According to this criteria, which of the following controls
consists of incident response processes, management oversight, security awareness, and

training?

An Authorizing Official plays the role of an approver. What are the responsibilities of an
Authorizing Official? Each correct answer represents a complete solution. Choose all that
apply.