Which of the following DITSCAP phases validates that the preceding work has produced an IS
that operates in a specified computing environment?

A.
Phase 2

B.
Phase 4

C.
Phase 1

D.
Phase 3

Explanation:
The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to
validate that the preceding work has produced an IS that operates in a specified computing
identify the main C&A roles and responsibilities, and create an agreement on the method for
phase ensures that it will maintain an acceptable level of residual risk.