Free Certified Authorization Professional CAP Exam Practice Test

Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit you're your organization seizes this opportunity it would be an example of what risk response?

• Opportunistic
  
• Positive
  
• Enhancing
  
• Exploiting
  

Which of the following processes is a structured approach to transitioning individuals, teams, and organizations from a current state to a desired future state?

• Configuration management
  
• Procurement management
  
• Change management
  
• Risk management
  

Virginia is the project manager for her organization. She has hired a subject matter expert to interview the project stakeholders on certain identified risks within the project. The subject matter expert will assess the risk event with what specific goal in mind?

• To determine the bias of the risk event based on each person interviewed
  
• To determine the probability and cost of the risk event
  
• To determine the validity of each risk event
  
• To determine the level of probability and impact for each risk event
  

You work as a project manager for BlueWell Inc. There has been a delay in your project work that is adversely affecting the project schedule. You decided, with your stakeholders' approval, to fast track the project work to get the project done faster. When you fast track the project which of the following are likely to increase?

• Risks
  
• Human resource needs
  
• Quality control concerns
  
• Costs
  

Which of the following is used in the practice of Information Assurance (IA) to define assurance requirements?

• Classic information security model
  
• Communications Management Plan
  
• Five Pillars model
  
• Parker an Hexad
  

In which of the following DIACAP phases is residual risk analyzed?

• Phase 2
  
• Phase 4
  
• Phase 5
  
• Phase 3
  
• Phase 1
  

You are working as a project manager in your organization. You are nearing the final stages of project execution and looking towards the final risk monitoring and controlling activities. For your project archives, which one of the following is an output of risk monitoring and control?

• Quantitative risk analysis
  
• Qualitative risk analysis
  
• Requested changes
  
• Risk audits
  

In which of the following phases do the system security plan update and the Plan of Action and Milestones (POAM) update take place?

• Continuous Monitoring Phase
  
• Accreditation Phase
  
• Preparation Phase
  
• DITSCAP Phase
  

Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?

• Discretionary Access Control
  
• Mandatory Access Control
  
• Policy Access Control
  
• Role-Based Access Control
  

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD?Each correct answer represents a complete solution. Choose all that apply.

• DC Security Design & Configuration
  
• VI Vulnerability and Incident Management
  
• EC Enclave and Computing Environment
  
• Information systems acquisition, development, and maintenance