Free Certified Authorization Professional CAP Exam Practice Test

You are the project manager of the NNQ Project for your company and are working you're your project team to define contingency plans for the risks within your project. Mary, one of your project team members, asks what a contingency plan is. Which of the following statements best defines what a contingency response is?

• Some responses are designed for use only if certain events occur.
  
• Some responses have a cost and a time factor to consider for each risk event.
  
• Some responses must counteract pending risk events.
  
• Quantified risks should always have contingency responses.
  

Tracy is the project manager of the NLT Project for her company. The NLT Project is scheduled to last 14 months and has a budget at completion of $4,555,000. Tracy's organization will receive a bonus of $80,000 per day that the project is completed early up to $800,000. Tracy realizes that there are several opportunities within the project to save on time by crashing the project work. Crashing the project is what type of risk response?

• Mitigation
  
• Exploit
  
• Enhance
  
• Transference
  

Which of the following individuals is responsible for the final accreditation decision?

• Information System Owner
  
• Certification Agent
  
• User Representative
  
• Risk Executive
  

Fred is the project manager of the PKL project. He is working with his project team to complete the quantitative risk analysis process as a part of risk management planning. Fred understands that once the quantitative risk analysis process is complete, the process will need to be completed again in at least two other times in the project. When will the quantitative risk analysis process need to be repeated?

• Quantitative risk analysis process will be completed again after the plan risk response planning and as part of procurement.
  
• Quantitative risk analysis process will be completed again after the cost management planning and as a part of monitoring and controlling.
  
• Quantitative risk analysis process will be completed again after new risks are identified and as part of monitoring and controlling.
  
• Quantitative risk analysis process will be completed again after the risk response planning and as a part of monitoring and controlling.
  

Harry is the project manager of the MMQ Construction Project. In this project Harry has identified a supplier who can create stained glass windows for 1,000 window units in the construction project. The supplier is an artist who works by himself, but creates windows for several companies throughout the United States. Management reviews the proposal to use this supplier and while they agree that the supplier is talented, they do not think the artist can fulfill the 1,000 window units in time for the project's deadline. Management asked Harry to find a supplier who will guarantee the completion of the windows by the needed date in the schedule. What risk response has management asked Harry to implement?

• Acceptance
  
• Mitigation
  
• Avoidance
  
• Transference
  

Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit you're your organization seizes this opportunity it would be an example of what risk response?

• Opportunistic
  
• Positive
  
• Enhancing
  
• Exploiting
  

In which type of access control do user ID and password system come under?

• Administrative
  
• Technical
  
• Power
  
• Physical
  

James work as an IT systems personnel in SoftTech Inc. He performs the following tasks:Runs regular backups and routine tests of the validity of the backup data.Performs data restoration from the backups whenever required.Maintains the retained records in accordance with the established information classification policy.What is the role played by James in the organization?

• Manager
  
• User
  
• Owner
  
• Custodian
  

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?Each correct answer represents a complete solution. Choose two.

• Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
  
• Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
  
• Certification is the official management decision given by a senior agency official to authorize operation of an information system.
  
• Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
  

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?Each correct answer represents a complete solution. Choose two.

• Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
  
• Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
  
• Certification is the official management decision given by a senior agency official to authorize operation of an information system.
  
• Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.