Fred is the project manager of the CPS project. He is working with his project team to prioritize the
identified risks within the CPS project. He and the team are prioritizing risks for further analysis or
action by assessing and combining the risks probability of occurrence and impact. What process is
Fred completing?

Which of the following are the levels of public or commercial data classification system? Each
correct answer represents a complete solution. Choose all that apply.

Which of the following statements are true about declarative security? Each correct answer
represents a complete solution. Choose all that apply.

What project management plan is most likely to direct the quantitative risk analysis process for a
project in a matrix environment?

The DoD 8500 policy series represents the Department’s information assurance strategy. Which of
the following objectives are defined by the DoD 8500 series? Each correct answer represents a
complete solution. Choose all that apply.

Which of the following vulnerabilities occurs when an application directly uses or concatenates
potentially hostile input with data file or stream functions?

Which of the following are the primary functions of configuration management?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following are included in Technical Controls? Each correct answer represents a
complete solution. Choose all that apply.

What are the various phases of the Software Assurance Acquisition process according to the U.S.
Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition and
Outsourcing Working Group?

Companies use some special marks to distinguish their products from those of other companies.
These marks can include words, letters, numbers, drawings, etc. Which of the following terms
describes these special marks?