You work as a project manager for BlueWell Inc. You are working with your team members
on the risk responses in the project. Which risk response will likely cause a project to use

the procurement processes?

An authentication method uses smart cards as well as usernames and passwords for
authentication. Which of the following authentication methods is being referred to?

Which of the following risk responses delineates that the project plan will not be changed to
deal with the risk?

Which of the following statements reflect the ‘Code of Ethics Canons’ in the ‘(ISC)2 Code of
Ethics’? Each correct answer represents a complete solution. Choose all that apply.

The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate
that the preceding work has produced an IS that operates in a specified computing
environment. What are the process activities of this phase? Each correct answer represents
a complete solution. Choose all that apply.

Your organization has named you the project manager of the JKN Project. This project has
a BAC of $1,500,000 and it is expected to last 18 months. Management has agreed that if
the schedule baseline has a variance of more than five percent then you will need to crash
the project. What happens when the project manager crashes a project?

Which of the following individuals makes the final accreditation decision?

Which of the following DoD directives defines DITSCAP as the standard C&A process for
the Department of Defense?

Virginia is the project manager for her organization. She has hired a subject matter expert to
interview the project stakeholders on certain identified risks within the project. The subject
matter expert will assess the risk event with what specific goal in mind?

A security policy is an overall general statement produced by senior management that
dictates what role security plays within the organization. What are the different types of
policies? Each correct answer represents a complete solution. Choose all that apply.