Which of the following refers to a process that is used for implementing information
security?

What project management plan is most likely to direct the quantitative risk analysis process
for a project in a matrix environment?

Your project team has identified a project risk that must be responded to. The risk has been
recorded in the risk register and the project team has been discussing potential risk
responses for the risk event. The event is not likely to happen for several months but the
probability of the event is high. Which one of the following is a valid response to the
identified risk event?

Which of the following statements about the availability concept of Information security
management is true?

Which of the following are the objectives of the security certification documentation task?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements about System Access Control List (SACL) is true?

Kelly is the project manager of the BHH project for her organization. She is completing the
risk identification process for this portion of her project. Which one of the following is the
only thing that the risk identification process will create for Kelly?

You are the project manager for your organization. You are working with your project team
to complete the qualitative risk analysis process. The first tool and technique you are using
requires that you assess the probability and what other characteristic of each identified risk
in the project?

You are preparing to complete the quantitative risk analysis process with your project team
and several subject matter experts. You gather the necessary inputs including the project’s
cost management plan. Why is it necessary to include the project’s cost management plan
in the preparation for the quantitative risk analysis process?

What NIACAP certification levels are recommended by the certifier? Each correct answer
represents a complete solution. Choose all that apply.