CAP ISC2 Exam Questions and Free Practice Test

Question 61

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about ISSO and ISSE?
Each correct answer represents a complete solution. Choose all that apply.

A. An ISSO manages the security of the information system that is slated for Certification &Accreditation (C&A).

B. An ISSE manages the security of the information system that is slated for Certification & Accreditation (C&A).

C. An ISSE provides advice on the continuous monitoring of the information system.

D. An ISSO takes part in the development activities that are required to implement system ch anges.

E. An ISSE provides advice on the impacts of system changes.

Correct Answer:ACE

Question 62

There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to the perform quantitative risk analysis process?

A. Risk register

B. Cost management plan

C. Risk management plan

D. Enterprise environmental factors

Correct Answer:D

Question 63

Jeff, a key stakeholder in your project, wants to know how the risk exposure for the risk events is calculated during quantitative risk analysis. He is worried about the risk exposure which is too low for the events surrounding his project requirements. How is the risk exposure calculated?

A. The probability of a risk event plus the impact of a risk event determines the true risk expo sure.

B. The risk exposure of a risk event is determined by historical information.

C. The probability of a risk event times the impact of a risk event determines the true risk exposure.

D. The probability and impact of a risk event are gauged based on research and in-depth analysis.

Correct Answer:C

Question 64

Tracy is the project manager of the NLT Project for her company. The NLT Project is scheduled to last 14 months and has a budget at completion of $4,555,000. Tracy's organization will receive a bonus of $80,000 per day that the project is completed early up to $800,000. Tracy realizes that there are several opportunities within the project to save on time by crashing the project work.
Crashing the project is what type of risk response?

A. Mitigation

B. Exploit

C. Enhance

D. Transference

Correct Answer:C

Question 65

In which of the following Risk Management Framework (RMF) phases is strategic risk assessment planning performed?

A. Phase 0

B. Phase 1

C. Phase 2

D. Phase 3

Correct Answer:A

Question 66

Eric is the project manager of the MTC project for his company. In this project a vendor has offered Eric a sizeable discount on all hardware if his order total for the project is more than $125,000. Right now, Eric is likely to spend $118,000 with vendor. If Eric spends $7,000 his cost savings for the project will be $12,500, but he cannot purchase hardware if he cannot implement the hardware immediately due to organizational policies. Eric consults with Amy and Allen, other project managers in the organization, and asks if she needs any hardware for their projects. Both Amy and Allen need hardware and they agree to purchase the hardware through Eric's relationship with the vendor. What positive risk response has happened in this instance?

A. Transference

B. Exploiting

C. Sharing

D. Enhancing

Correct Answer:C

START CAP EXAM