Free ISC CGRC Exam Dumps Questions & Answers

Which of the following statements about System Access Control List (SACL) is true? Response:

• A.It contains a list of any events that are set to audit for that particular object.
• B.It contains a list of both users and groups and whatever permissions they have.
• C.It exists for each and every permission entry assigned to any object.
• D.It is a mechanism for reducing the need for globally unique IP addresses.

Which of the following BEST describes the objective of a Security Assessment Plan? Response:

• A.It describes how to verify the change control and Configuration Management (CM) practices
• B.It provides an assessment process for the integration of software and hardware
• C.It provides a detailed roadmap for how the assessment will be conducted
• D.It ensures that changes made during system development are included in security assessments.

What are the six steps of the RMF?
Response:

• A.Assess
  Categorize
  Implement
  Monitor
  Select
  Authorize
• B.Categorize
  Implement
  Authorize
  Select
  Assess
  Monitor
• C.Monitor
  Categorize
  Assess
  Authorize
  Implement
  Select
• D.Categorize
  Select
  Implement
  Assess
  Authorize
  Monitor

Organization official that's responsible for procurement, development, integration, modification, operation, maintenance, and disposal of an Information System.
Response:

• A.Authorizing Official
• B.Information System Owner
• C.Chief Information Officer
• D.Information Security Architect

The authorization decision document conveys the final security authorization decision from the authorizing official to the information system owner. The authorization decision document contains all of the following information except?
Response:

• A.Authorization decision
• B.Authorization termination date
• C.Approving revisions to the SSAA
• D.Terms and conditions for the authorization