Question 1

Which of the following is NOT an objective of the security program?

Options :

A : Security education

B : Information classification

C : Security organization

D : Security plan

Answer: D

Question 2

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted as a Federal Information Processing Standard?

Options :

A : Type III (E) cryptography

B : Type III cryptography

C : Type I cryptography

D : Type II cryptography

Answer: B

Question 3

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

Options :

A : System Security Context

B : Information Protection Policy (IPP)

C : CONOPS

D : IMM

Answer: B

Question 4

In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199? Each correct answer represents a complete solution. Choose all that apply.

Options :

A : High

B : Medium

C : Low

D : Moderate

Answer: A,B,C

Question 5

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information

Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are

among the eight areas of IA defined by DoD?

Each correct answer represents a complete solution. Choose all that apply

Options :

A : DC Security Design & Configuration

B : EC Enclave and Computing Environment

C : VI Vulnerability and Incident Management

D : Information systems acquisition, development, and maintenance

Answer: A,B,C