Question 1

Which of the following are the most important tasks of the Information Management Plan (IMP)? Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Define the Information Protection Policy (IPP)

B : Define the System Security Requirements

C : Define the mission need

D : Identify how the organization manages its information.

Answer: A,C,D

Question 2

Which of the following is NOT an objective of the security program?

Options :

A : Security education

B : Information classification

C : Security organization

D : Security plan

Answer: D

Question 3

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

Options :

A : System Security Context

B : Information Protection Policy (IPP)

C : CONOPS

D : IMM

Answer: B

Question 4

In which of the following DIACAP phases is residual risk analyzed?

Options :

A : Phase 2

B : Phase 3

C : Phase 5

D : Phase 1

E : Phase 4

Answer: A

Question 5

Which of the following certification levels requires the completion of the minimum security checklist and more in-depth, independent analysis?

Options :

A : CL 3

B : CL 4

C : CL 2

D : CL 1

Answer: A