Which of the following risk responses delineates that the project plan will not be changed to
deal with the risk?

Which of the following statements reflect the ‘Code of Ethics Canons’ in the ‘(ISC)2 Code of
Ethics’? Each correct answer represents a complete solution. Choose all that apply.

The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate
that the preceding work has produced an IS that operates in a specified computing
environment. What are the process activities of this phase? Each correct answer represents
a complete solution. Choose all that apply.

Your organization has named you the project manager of the JKN Project. This project has
a BAC of $1,500,000 and it is expected to last 18 months. Management has agreed that if
the schedule baseline has a variance of more than five percent then you will need to crash
the project. What happens when the project manager crashes a project?

Which of the following individuals makes the final accreditation decision?

Which of the following DoD directives defines DITSCAP as the standard C&A process for
the Department of Defense?

Virginia is the project manager for her organization. She has hired a subject matter expert to
interview the project stakeholders on certain identified risks within the project. The subject
matter expert will assess the risk event with what specific goal in mind?

A security policy is an overall general statement produced by senior management that
dictates what role security plays within the organization. What are the different types of
policies? Each correct answer represents a complete solution. Choose all that apply.

In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as
FIPS 199. What levels of potential impact are defined by FIPS 199? Each correct answer
represents a complete solution. Choose all that apply.

Harry is a project manager of a software development project. In the early stages of
planning, he and the stakeholders operated with the belief that the software they were
developing would work with their organization’s current computer operating system. Now
that the project team has started developing the software it has become apparent that the
software will not work with nearly half of the organization’s computer operating systems.
The incorrect belief Harry had in the software compatibility is an example of what in project
management?