Pass CAP Exam – Real Test Engine PDF with 395 Questions [Q234-Q251]

NEW QUESTION 234
You work as a project manager for BlueWell Inc. You are preparing to plan risk responses for your project with your team. How many risk response types are available for a negative risk event in the project?

NEW QUESTION 235
Risks with low ratings of probability and impact are included on a ____ for future monitoring.

NEW QUESTION 236
Which of the following governance bodies directs and coordinates implementations of the information security program?

NEW QUESTION 237
The Software Configuration Management (SCM) process defines the need to trace changes, and the ability to verify that the final delivered software has all of the planned enhancements that are supposed to be included in the release. What are the procedures that must be defined for each software project to ensure that a sound SCM process is implemented?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 238
You are the project manager of the BlueStar project in your company. Your company is structured as a functional organization and you report to the functional manager that you are ready to move onto the qualitative risk analysis process. What will you need as inputs for the qualitative risk analysis of the project in this scenario?

NEW QUESTION 239
Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?

NEW QUESTION 240
Diane is the project manager of the HGF Project. A risk that has been identified and analyzed in the project planning processes is now coming into fruition. What individual should respond to the risk with the preplanned risk response?

NEW QUESTION 241
Which of the following statements about Discretionary Access Control List (DACL) is true?

NEW QUESTION 242
Which of the following RMF phases identifies key threats and vulnerabilities that could compromise the confidentiality, integrity, and availability of the institutional critical assets?

NEW QUESTION 243
Which of the following risk responses delineates that the project plan will not be changed to deal with the risk?

NEW QUESTION 244
Which of the following statements about System Access Control List (SACL) is true?

NEW QUESTION 245
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase?
Each correct answer represents a complete solution. Choose all that apply.

NEW QUESTION 246
You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is?

NEW QUESTION 247
Harry is a project manager of a software development project. In the early stages of planning, he and the stakeholders operated with the belief that the software they were developing would work with their organization’s current computer operating system. Now that the project team has started developing the software it has become apparent that the software will not work with nearly half of the organization’s computer operating systems. The incorrect belief Harry had in the software compatibility is an example of what in project management?

NEW QUESTION 248
Wendy is about to perform qualitative risk analysis on the identified risks within her project. Which one of the following will NOT help Wendy to perform this project management activity?

NEW QUESTION 249
Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production?
Each correct answer represents a part of the solution. Choose all that apply.

NEW QUESTION 250
Which of the following individuals makes the final accreditation decision?

NEW QUESTION 251
System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan?
Each correct answer represents a part of the solution. Choose all that apply.