Which of the following assessment methods is used to review, inspect, and analyze assessment objects?

Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality?

In which of the following phases do the system security plan update and the Plan of Action and Milestones
(POAM) update take place?

In which of the following phases does the SSAA maintenance take place?

Which of the following is not a part of Identify Risks process?

Which of the following processes has the goal to ensure that any change does not lead to reduced or compromised security?

Which of the following is NOT a phase of the security certification and accreditation process?

Which of the following relations correctly describes residual risk?

Which of the following NIST documents defines impact?

Which of the following formulas was developed by FIPS 199 for categorization of an information system?