CGRC Exam Question 151
Which of the following roles is also known as the accreditor? Response:
CGRC Exam Question 152
What should the system owner use to prioritize mitigation actions when developing the plan of action and milestones (POA&M)?
Response:
Response:
CGRC Exam Question 153
An incremental backup captures files that were created or changed since the last backup, regardless of backup type. Incremental backups afford more efficient use of storage media, and backup times are reduced.
However, to recover a system from an incremental backup, media from different backup operations may be required. For example, consider a case in which a directory needed to be recovered. If the last full backup was performed three days prior and one file changed each day, then the media for the full backup and each day's incremental backups would be needed to restore the entire directory.
Response:
However, to recover a system from an incremental backup, media from different backup operations may be required. For example, consider a case in which a directory needed to be recovered. If the last full backup was performed three days prior and one file changed each day, then the media for the full backup and each day's incremental backups would be needed to restore the entire directory.
Response:
CGRC Exam Question 154
According to NIST SP 800-37 Rev 2, which role has a primary responsibility to report the security status of the information system to the authorizing official (OA) and other appropriate organizational officials on an ongoing basis in accordance with the monitoring strategy?
Response:
Response:
CGRC Exam Question 155
According to NIST SP 800-37 Rev 2 appendix F, there exists several types of authorization decisions including all of the following except one.
Response:
Response:
