Which of the following guidelines is recommended for engineering, protecting, managing,
processing, and controlling national security and sensitive (although unclassified) information

Which of the following Security Control Assessment Tasks gathers the documentation and
supporting materials essential for the assessment of the security controls in the information
system

Which of the following professionals plays the role of a monitor and takes part in the organization’s
configuration management process

Which of the following processes culminates in an agreement between key players that a system
in its current configuration and operation provides adequate protection controls

The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system
has been accredited in Phase 3. What are the process activities of this phase Each correct answer
represents a complete solution. Choose all that apply.

Which of the following email lists is written for the technical audiences, and provides weekly
summaries of security issues, new vulnerabilities, potential impact, patches and workarounds, as
well as the actions recommended to mitigate risk

Which of the following tasks obtains the customer agreement in planning the technical effort

Which of the following documents were developed by NIST for conducting Certification &
Accreditation (C&A) Each correct answer represents a complete solution. Choose all that apply.

Which of the following elements are described by the functional requirements task Each correct
answer represents a complete solution. Choose all that apply.

Which of the following documents is defined as a source document, which is most useful for the
ISSE when classifying the needed security functionality