Question 1

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose all that apply

Options :

A : Post-certification

B : Post-Authorization

C : Authorization

D : Pre-certification

E : Certification

Answer: A,B,C,D

Question 2

Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.

Options :

A : NIST

B : Office of Management and Budget (OMB)

C : FIPS

D : FISMA

Answer: B,D

Question 3

Security Test and Evaluation (ST&E) is a component of risk assessment. It is useful in discovering system vulnerabilities. For what purposes is ST&E used? Each correct answer represents a complete solution. Choose all that apply

Options :

A : To implement the design of system architecture

B : To determine the adequacy of security mechanisms, assurances, and other properties to enforce the security policy

C : To assess the degree of consistency between the system documentation and its implementation

D : To uncover design, implementation, and operational flaws that may allow the violation of security policy

Answer: B,C,D

Question 4

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

Options :

A : Anonymous

B : Mutual

C : Multi-factor

D : Biometrics

Answer: C

Question 5

Which of the following methods offers a number of modeling practices and disciplines that contribute to a successful service-oriented life cycle management and modeling?

Options :

A : Service-oriented modeling framework (SOMF)

B : Service-oriented architecture (SOA)

C : Sherwood Applied Business Security Architecture (SABSA)

D : Service-oriented modeling and architecture (SOMA)

Answer: A

Higher Test Marks with Free Online CSSLP Exam Practice

Buying Options: