QUESTION 53
Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls

QUESTION 54
A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. Which of the following are required to be addressed in a well designed policy Each correct answer represents a part of the solution. Choose all that apply.

QUESTION 55
Which of the following configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available

QUESTION 56
Which of the following individuals is responsible for the oversight of a program that is supported by a team of people that consists of, or be exclusively comprised of contractors

QUESTION 57
Which of the following tasks describes the processes required to ensure that the project includes all the work required, and only the work required, to complete the project successfully

QUESTION 58
Fill in the blank with an appropriate phrase. The ____________ helps the customer understand and document the information management needs that support the business or mission.

QUESTION 59
Which of the following DoD policies provides assistance on how to implement policy, assign responsibilities, and prescribe procedures for applying integrated, layered protection of the DoD information systems and networks

QUESTION 60
Which of the following is NOT an objective of the security program

QUESTION 61
The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer Each correct answer represents a complete solution. Choose all that apply.

QUESTION 62
Which of the following individuals is responsible for the oversight of a program that is supported by a team of people that consists of, or be exclusively comprised of contractors

QUESTION 63
Which of the following organizations is a USG initiative designed to meet the security testing, evaluation, and assessment needs of both information technology (IT) producers and consumers

QUESTION 64
Which of the following cooperative programs carried out by NIST conducts research to advance the nation’s technology infrastructure

QUESTION 65
Which of the following are the most important tasks of the Information Management Plan (IMP)?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 66
Which of the following statements define the role of the ISSEP during the development of the detailed security design, as mentioned in the IATF document Each correct answer represents a complete solution.
Choose all that apply.

QUESTION 67
Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality

QUESTION 68
Which of the following are the ways of sending secure e-mail messages over the Internet Each correct answer represents a complete solution. Choose two.

QUESTION 69
Which of the following individuals are part of the senior management and are responsible for authorization of individual systems, approving enterprise solutions, establishing security policies, providing funds, and maintaining an understanding of risks at all levels Each correct answer represents a complete solution. Choose all that apply.

QUESTION 70
Which of the following agencies provides command and control capabilities and enterprise infrastructure to continuously operate and assure a global net-centric enterprise in direct support to joint warfighters, National level leaders, and other mission and coalition partners across the full spectrum of operations

QUESTION 71
Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk responses for the risk event. The event is not likely to happen for several months but the probability of the event is high. Which one of the following is a valid response to the identified risk event

QUESTION 72
SIMULATION
Fill in the blank with an appropriate phrase. A ____________________ is defined as any activity that has an effect on defining, designing, building, or executing a task, requirement, or procedure.