Which of the following are included in Administrative Controls? Each correct answer represents a complete solution. Choose all that apply.
Response:

The registration of the system directly follows which RMF task? Response:

The purpose of security controls testing is to evaluate the _________________ of the security controls protecting an information system.
Response:

Although system authorization is important; obtaining ATO is not the end; continuous monitoring provides ______________ that an information system remains secure following accreditation.
Response:

An organization's information systems are a mix of Windows and UNIX systems located in a single computer room. Access to the computer room is restricted by the use of door locks that require proximity cards and personal identification numbers (PINs). Only a small percentage of the organizations employees have access to the computer room. The computer room access restriction is an example of what type of security control relative to the hardware in the computer room?
Response: