Ned is the program manager for his organization and he’s considering some new materials
for his program. He and his team have never worked with these materials before and he
wants to ask the vendor for some additional information, a demon, and even some samples.
What type of a document should Ned send to the vendor?

Which of the following acts is used to recognize the importance of information security to the
economic and national security interests of the United States?

What approach can a project manager use to improve the project’s performance during
qualitative risk analysis?

Which of the following is used in the practice of Information Assurance (IA) to define
assurance requirements?

Joan is the project manager of the BTT project for her company. She has worked with her
project to create risk responses for both positive and negative risk events within the project.
As a result of this process Joan needs to update the project document updates. She has
updated the assumptions log as a result of the findings and risk responses, but what other
documentation will need to be updated as an output of risk response planning?

Which of the following access control models uses a predefined set of access privileges for
an object of a system?

Which of the following describes residual risk as the risk remaining after risk mitigation has
occurred?

You work as the project manager for Bluewell Inc. There has been a delay in your project
work that is adversely affecting the project schedule. You decide, with your stakeholders’
approval, to fast track the project work to get the project done faster. When you fast track
the project, what is likely to increase?

Which of the following components ensures that risks are examined for all new proposed
change requests in the change control system?

Which of the following classification levels defines the information that, if disclosed to the
unauthorized parties, could be reasonably expected to cause exceptionally grave damage
to the national security?