Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the following are the U.S. Federal Government information security standards? Each correct answer represents a complete solution. Choose all that apply.

• A.IR Incident Response
• B.Information systems acquisition, development, and maintenance
• C.SA System and Services Acquisition
• D.CA Certification, Accreditation, and Security Assessments

Comment: *

Name: *

Email: *

Verification: *

Which of the following DITSCAP C&A phases takes place between the signing of the initial version of the SSAA and the formal accreditation of the system?

• A.Phase 4
• B.Phase 3
• C.Phase 1
• D.Phase 2

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
Drag and drop the correct DoD Policy Series at their appropriate places.
Select and Place:

Correct Answer:

Explanation/Reference:
Explanation: The various DoD policy series are as follows:

Comment: *

Name: *

Email: *

Verification: *

Which of the following NIST Special Publication documents provides a guideline on questionnaires and checklists through which systems can be evaluated for compliance against specific control objectives?

• A.NIST SP 800-37
• B.NIST SP 800-26
• C.NIST SP 800-53A
• D.NIST SP 800-59
• E.NIST SP 800-53
• F.NIST SP 800-60

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.

• A.Vulnerability
• B.Port
• C.Services
• D.Network

Comment: *

Name: *

Email: *

Verification: *