Free ISC CGRC Exam Dumps Questions & Answers

POAM update frequency is at discretion of System Owner but should be frequent enough to provide an accurate status of progress in remediation.
Response:

• A.False
• B.True

In what step of the RMF process would you create the SSP? Response:

• A.Step 1 (Categorization)
• B.Step 2 (Recommendations)
• C.Step 4 (Determination)
• D.Step 3 (Mitigation)

___________________ information is defined as any information that the loss, misuse or unauthorized access would adversely affect the national interest or the conduct of federal programs or the privacy to which individuals are entitled.
Response:

• A.Criticality
• B.Sensitive
• C.Responsibility
• D.Availability

Hardware, software, and firmware are examples of which of the assessment objects exercised by control assessors?
Response:

• A.Individuals
• B.Mechanisms
• C.Examine
• D.Activities

You are the project manager for a construction project. The project includes a work that involves very high financial risks. You decide to insure processes so that any ill happening can be compensated. Which type of strategies have you used to deal with the risks involved with that particular work? Response:

• A.Accept
• B.Transfer
• C.Mitigate
• D.Avoid