The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include? Each correct answer represents a part of the solution. Choose all that apply.

• A.Remediation of a particular vulnerability
• B.Cost-benefit examination of countermeasures
• C.Identification of vulnerabilities
• D.Assessment of attacks

Comment: *

Name: *

Email: *

Verification: *

FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented?

• A.Level 2
• B.Level 3
• C.Level 5
• D.Level 1
• E.Level 4

Comment: *

Name: *

Email: *

Verification: *

Which of the following disaster recovery tests includes the operations that shut down at the primary site, and are shifted to the recovery site according to the disaster recovery plan?

• A.Structured walk-through test
• B.Full-interruption test
• C.Parallel test
• D.Simulation test

Comment: *

Name: *

Email: *

Verification: *

The Phase 1 of DITSCAP C&A is known as Definition Phase. The goal of this phase is to define the C&A level of effort, identify the main C&A roles and responsibilities, and create an agreement on the method for implementing the security requirements. What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.

• A.Negotiation
• B.Registration
• C.Document mission need
• D.Initial Certification Analysis

Comment: *

Name: *

Email: *

Verification: *

The service-oriented modeling framework (SOMF) provides a common modeling notation to address alignment between business and IT organizations. Which of the following principles does the SOMF concentrate on? Each correct answer represents a part of the solution. Choose all that apply.

• A.Architectural components abstraction
• B.SOA value proposition
• C.Business traceability
• D.Disaster recovery planning
• E.Software assets reuse

Comment: *

Name: *

Email: *

Verification: *