最新的 ISC Certification CGRC 免費考試真題:

1. System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose all that apply.
Response:

A) Pre-certification
B) Post-certification
C) Authorization
D) Post-Authorization
E) Certification

2. Which of the following is NOT an objective of the security program? Response:

A) Security organization
B) Security plan
C) Security education
D) Information classification

3. The security assessment plan is prepared to provide the Authorizing Official and other organizational officials with a plan of how the security assessment will be conducted. Which roles have the primary responsibility to prepare the security assessment plan? Response:

A) Authorizing official (AO), Authorizing Official Designated Representative (AODR), Information System Owner (ISO)
B) Information System Owner (ISO), Security Control Assessor (SCA), Information System Security Officer (ISSO)
C) Authorizing official (AO), Authorizing Official Designated Representative (AODR), Security Control Assessor (SCA)
D) Authorizing official (AO), Information System Owner (ISO), Security Control Assessor (SCA)

4. Information that has been determined pursuant to Executive Order 12958 as amended by Executive Order 13292, or any predecessor order, or by the Atomic Energy Act of 1954, as amended, to require protection against unauthorized disclosure and is marked to indicate its classified status.
Response:

A) Information System Resilience
B) National Security Information
C) Federal Information Security Management Act
D) Information System Owner

5. Which reference document describes the contents of a Plan of Action and Milestone (POA&M) updating and replacing OMB M 02-01?
Response:

A) OMB M-04-09
B) OMB M 02-11
C) OMB M-02-09
D) OMB M-02-14

問題與答案：