Which of the following NIST documents defines impact?

A. NIST SP 800-53
B. NIST SP 800-26
C. NIST SP 800-30
D. NIST SP 800-53A

Which of the following formulas was developed by FIPS 199 for categorization of an information system?

A. SC information system = {(confidentiality, impact), (integrity, controls), (availability, risk)}
B. SC information system = {(confidentiality, impact), (integrity, impact), (availability, impact)}
C. SC information system = {(confidentiality, controls), (integrity, controls), (availability, controls )}
D. SC information system = {(confidentiality, risk), (integrity, impact), (availability, controls)}

Which of the following is NOT a type of penetration test?

A. Cursory test
B. Partial-knowledge test
C. Zero-knowledge test
D. Full knowledge test

Which of the following is NOT considered an environmental threat source?

A. Pollution
B. Hurricane
C. Chemical
D. Water

Which of the following formulas was developed by FIPS 199 for categorization of an information type?

A. SC information type = {(confidentiality, controls), (integrity, controls), (authentication, controls)}
B. SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}
C. SC information type = {(confidentiality, risk), (integrity, risk), (availability, risk)}
D. SC information type = {(Authentication, impact), (integrity, impact), (availability, impact)}

Which of the following phases begins with a review of the SSAA in the DITSCAP accreditation?

A. Phase 1
B. Phase 4
C. Phase 3
D. Phase 2

Which of the following is a security policy implemented by an organization due to compliance, regulation, or other legal requirements?

A. Advisory policy
B. Informative policy
C. System Security policy
D. Regulatory policy

Which of the following administrative policy controls requires individuals or organizations to be engaged in good business practices relative to the organization's industry?

A. Segregation of duties
B. Separation of duties
C. Need to Know
D. Due care

In which of the following Risk Management Framework (RMF) phases is strategic risk assessment planning performed?

A. Phase 0
B. Phase 1
C. Phase 2
D. Phase 3

Which of the following methods of authentication uses finger prints to identify users?

A. PKI
B. Mutual authentication
C. Biometrics
D. Kerberos