We're so confident of our products that we provide no hassle product exchange.
ISC Certified in Governance Risk and Compliance Sample Questions:
1. An event or situation that has the potential for causing undesirable consequences or impact.
Response:
A) Threat Source
B) Threat Event
C) Threat Assessment
D) Threat Scenario
2. An official public notice of an organization's system(s) of records, as required by the Privacy Act of 1974, that identifies: (i) the purpose for the system of records; (ii) the individuals covered by information in the system or records; (iii) the categories of records maintained about individuals; and (iv) the ways in which the information is shared.
Response:
A) System of Records Notice
B) System of Record
C) System Inventory Process
D) System Interconnection
3. The official primarily responsibility for security of an Info System; who establishes sensitivity level and types of controls required to protect the IS and initiates system authorization activities.
Response:
A) Designated Representative
B) System Development Life-Cycle
C) Information System Owner
D) Risk Management Framework
4. The person primarily responsible for RMF Step 1, Categorization.
Response:
A) System Development Life-Cycle
B) Information System Owner
C) Plan of Action and Milestones
D) Risk Management Framework
5. Step 7 of the risk management framework can be described as:
Response:
A) The certification phase of the system authorization plan
B) The pre-certification phase of the system authorization plan
C) The authorization phase of the system authorization plan
D) The post-authorization phase of the system authorization plan
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: A | Question # 3 Answer: C | Question # 4 Answer: B | Question # 5 Answer: D |
By Vanessa
