CGRC Exam Question 11
Who has the authority to divide a complex system in order to establish realistic security authorization boundaries?
Response:
Response:
CGRC Exam Question 12
The assessed potential impact resulting from a compromise of the confidentiality, integrity, or availability of an information type, expressed as a value of low, moderate, or high.
Response:
Response:
CGRC Exam Question 13
Which of the following are phases of the NIST RMF?
Response:
Response:
CGRC Exam Question 14
According to FIPS Publication 199, what are the three levels of potential impact on organizations in the event of a compromise on confidentiality, integrity, and availability? Response:
CGRC Exam Question 15
Which NIST guide authorizes an organization to tailor system authorization activities to the level of effort and rigor that is suitable for the IS being tested? Response:
