ISC Certified in Governance Risk and Compliance Sample Questions:
1. Although system authorization is important; obtaining ATO is not the end; continuous monitoring provides ______________ that an information system remains secure following accreditation.
Response:
A) Assurance
B) Anxiety
C) Assumption
D) All of the above
2. The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation. What are the process activities of this phase? Each correct answer represents a complete solution.
Choose all that apply.
Response:
A) Configuring refinement of the SSAA
B) Registration
C) Certification analysis
D) System development
E) Assessment of the Analysis Results
3. A predetermined set of instructions or procedures that describe how an organization's mission essential functions will be sustained within 12 hours and for up to 30 days as a result of a disaster event before returning to normal operations.
Response:
A) Incident Response Plan
B) Operations Plan
C) Disaster Recovery Plan
D) Continuity of Operations Plan (COOP)
4. Which of the following roles is responsible for review and risk analysis of all contracts on a regular basis? Response:
A) The Supplier Manager
B) The Service Catalogue Manager
C) The Configuration Manager
D) The IT Service Continuity Manager
5. The National Institutes of Standards and Technology (NIST) guidance classifies security controls as? Response:
A) System-specific, Common and Hybrid
B) Technical, administrative, and program.
C) Production, development, and test.
D) People, process, and technology.
Solutions:
| Question # 1 Answer: A | Question # 2 Answer: A,C,D,E | Question # 3 Answer: D | Question # 4 Answer: A | Question # 5 Answer: A |
896 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
