Question 1

Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.

Options :

A : NIST

B : Office of Management and Budget (OMB)

C : FIPS

D : FISMA

Answer: B,D

Question 2

Code signing is done using what?

Options :

A : File integrity checks

B : Encrypted source code

C : Public key cryptography and hash functions

D : Controlled distribution channels such as SSL

Answer: C

Question 3

The operations phase of the software lifecycle is characterized by what?

Options :

A : It begins when software is released from development.

B : It begins with the development of the program requirements.

C : The response team is the process manager.

D : The development team is the process manager.

Answer: A

Question 4

You work as a security engineer for BlueWell Inc. According to you, which of the following DITSCAP/NIACAP model phases occurs at the initiation of the project, or at the initial C&A effort of a legacy system?

Options :

A : Validation

B : Definition

C : Verification

D : Post Accreditation

Answer: B

Question 5

You work as a project manager for BlueWell Inc. You are preparing to plan risk responses for your project with your team. How many risk response types are available for a negative risk event in the project?

Options :

A : Three

B : Seven

C : One

D : Four

Answer: D

Higher Test Marks with Free Online CSSLP Exam Practice

Buying Options: