Grab latest The SecOps Group CAP Dumps as PDF Updated on 2026
Newly Released CAP Dumps for AppSec Practitioner Certified
NEW QUESTION # 17
You are the project manager for TTP project. You are in the Identify Risks process. You have to create the risk register. Which of the following are included in the risk register?
Each correct answer represents a complete solution. Choose two.
- A. List of identified risks
- B. List of potential responses
- C. List ofmitigation techniques
- D. List of key stakeholders
Answer: A,B
NEW QUESTION # 18
Mark works as a project manager for TechSoft Inc. Mark, the project team, and the key project stakeholders have completed a round of qualitative risk analysis. He needs to update the risk register with his findings so that he can communicate the risk results to the project stakeholders - including management. Mark will need to update all of the following information except for which one?
- A. Trends in qualitative risk analysis
- B. Watchlist of low-priority risks
- C. Prioritized list of quantified risks
- D. Risks grouped by categories
Answer: C
NEW QUESTION # 19
You are the project manager of the GGH Project in your company. Your company is structured as a functional organization and you report to the functional manager that you are ready to move onto the quantitative risk analysis process. What things will you need as inputs for the quantitative risk analysis of the project in this scenario?
- A. You will need the risk register, risk management plan, permission from the functional manager, and any relevant organizational process assets.
- B. You will need the risk register, risk management plan, cost management plan, schedule management plan, and any relevant organizational process assets.
- C. You will need the risk register, risk management plan, outputs of qualitative risk analysis, and any relevant organizational process assets.
- D. Quantitative risk analysis does not happen through the project manager in a functional stru cture.
Answer: B
NEW QUESTION # 20
Beth is the project manager of the BFG Project for her company. In this project Beth has decided to create a contingency response based on the performance of the project schedule. If the project schedule variance is greater than $10,000 the contingency plan will be implemented. What is the formula for the schedule variance?
- A. SV=EV-PV
- B. SV=EV/PV
- C. SV=EV/AC
- D. SV=PV-EV
Answer: A
NEW QUESTION # 21
James work as an IT systems personnel in SoftTech Inc. He performs the following tasks:
Runs regular backups and routine tests of the validity of the backup data.
Performs data restoration from the backups whenever required.
Maintains the retained records in accordance with the established information classification policy.
What is the role played by James in the organization?
- A. User
- B. Custodian
- C. Owner
- D. Manager
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 22
Which of the following is used in the practice of Information Assurance (IA) to define assurance requirements?
- A. Parkerian Hexad
- B. Communications Management Plan
- C. Five Pillars model
- D. Classic information security model
Answer: D
NEW QUESTION # 23
The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems that handle U.S. national security information. What are the different types of NIACAP accreditation?
Each correct answer represents a complete solution. Choose all that apply.
- A. Secure accreditation
- B. Type accreditation
- C. System accreditation
- D. Site accreditation
Answer: B,C,D
NEW QUESTION # 24
Which of the following fields of management focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes with its requirements, design, and operational information throughout its life?
- A. Procurement management
- B. Risk management
- C. Configuration management
- D. Change management
Answer: C
NEW QUESTION # 25
Joan is a project management consultant and she has been hired by a firm to help them identify risk events within the project. Joan would first like to examine the project documents including the plans, assumptions lists, project files, and contracts. What key thing will help Joan to discover risks within the review of the project documents?
- A. Lack of consistency between the plans and the project requirements and assumptions can bethe indicators of risk in the project.
- B. The project documents will help the project manager, or Joan, to identify what risk identification approach is best to pursue.
- C. Plans that have loose definitions of terms and disconnected approaches will revealrisks.
- D. Poorly written requirements will reveal inconsistencies in the project plans and documents.
Answer: A
NEW QUESTION # 26
Which of the following approaches can be used to build a security program?
Each correct answer represents a complete solution. Choose all that apply.
- A. Bottom-Up Approach
- B. Left-Up Approach
- C. Top-Down Approach
- D. Right-Up Approach
Answer: A,C
NEW QUESTION # 27
Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to complete part of the project work for Eric's organization. Due to a change request the ZAS Corporation is no longer needed on the project even though they have completed nearly all of the project work. Is Eric's organization liable to pay the ZAS Corporation for the work they have completed so far on the project?
- A. It depends on what the termination clause of the contract stipulates
- B. It depends on what the outcome of a lawsuit will determine.
- C. Yes, the ZAS Corporation did not choose to terminate the contract work.
- D. No, the ZAS Corporation did not complete all of the work.
Answer: A
Explanation:
Section: Volume D
NEW QUESTION # 28
Which of the following formulas was developed by FIPS 199 for categorization of an information system?
- A. SC information system = {(confidentiality, impact), (integrity, controls), (availability, risk)}
- B. SC information system = {(confidentiality, risk), (integrity, impact), (availability, controls)}
- C. SC information system = {(confidentiality, controls), (integrity, controls), (availability, controls )}
- D. SC information system = {(confidentiality, impact), (integrity, impact), (availability, impact)}
Answer: D
Explanation:
Section: Volume B
NEW QUESTION # 29
The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer?
Each correct answer represents a complete solution. Choose all that apply.
- A. Facilitating the sharing of security risk-related information among authorizing officials
- B. Preserving high-level communications and working group relationships in an organization
- C. Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan
- D. Establishing effective continuous monitoring program for the organization
Answer: B,C,D
NEW QUESTION # 30
The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems that handle U.S. national security information. What are the different types of NIACAP accreditation?
Each correct answer represents a complete solution. Choose all that apply.
- A. Secure accreditation
- B. Type accreditation
- C. System accreditation
- D. Site accreditation
Answer: B,C,D
NEW QUESTION # 31
Which of the following groups represents the most likely source of an asset loss through the inappropriate use of computers?
- A. Hackers
- B. Customers
- C. Employees
- D. Visitors
Answer: C
Explanation:
Section: Volume D
NEW QUESTION # 32
You are the project manager of the GGH Project in your company. Your company is structured as a functional organization and you report to the functional manager that you are ready to move onto the quantitative risk analysis process. What things will you need as inputs for the quantitative risk analysis of the project in this scenario?
- A. You will need the risk register, risk management plan, permission from the functional manager, and any relevant organizational process assets.
- B. You will need the risk register, risk management plan, cost management plan, schedule management plan, and any relevant organizational process assets.
- C. You will need the risk register, risk management plan, outputs of qualitative risk analysis, and any relevant organizational process assets.
- D. Quantitative risk analysis does not happen through the project manager in a functional stru cture.
Answer: B
NEW QUESTION # 33
Which of the following are the goals of risk management?
Each correct answer represents a complete solution. Choose three.
- A. Finding an economic balance between the impact of the risk and the cost of the countermeasure
- B. Identifying the accused
- C. Assessing the impact of potential threats
- D. Identifying the risk
Answer: A,C,D
NEW QUESTION # 34
Which of the following NIST documents provides a guideline for identifying an information system as a National Security System?
- A. NIST SP 800-53A
- B. NIST SP 800-60
- C. NIST SP 800-53
- D. NIST SP 800-59
- E. NIST SP 800-37
Answer: D
NEW QUESTION # 35
Your project uses a piece of equipment that if the temperature of the machine goes above 450 degree Fahrenheit the machine will overheat and have to be shut down for 48 hours. Should this machine overheat even once it will delay the project's end date. You work with your project to create a response that should the temperature of the machine reach 430, the machine will be paused for at least an hour to cool it down. The temperature of 430 is called what?
- A. Risk trigger
- B. Risk identification
- C. Risk event
- D. Risk response
Answer: A
NEW QUESTION # 36
In which of the following elements of security does the object retain its veracity and is intentionally modified by the authorized subjects?
- A. Availability
- B. Nonrepudiation
- C. Integrity
- D. Confidentiality
Answer: C
NEW QUESTION # 37
Jenny is the project manager for the NBT projects. She is working with the project team and several subject matter experts to perform the quantitative risk analysis process. During this process she and the project team uncover several risks events that were not previously identified.
What should Jenny do with these risk events?
- A. The events should be determined if they need to be accepted or responded to.
- B. The events should be entered into qualitative risk analysis.
- C. The events should continue on with quantitative risk analysis.
- D. The events should be entered into the risk register.
Answer: D
NEW QUESTION # 38
In which of the following testing methodologies do assessors use all available documentation and work under no constraints, and attempt to circumvent the security features of an information system?
- A. Full operational test
- B. Walk-through test
- C. Paper test
- D. Penetration test
Answer: D
NEW QUESTION # 39
......
Latest CAP Exam Dumps The SecOps Group Exam from Training: https://www.suretorrent.com/CAP-exam-guide-torrent.html
Updated Verified CAP dumps Q&As - 100% Pass: https://drive.google.com/open?id=1m_zyZ0aCtIkuc-mRRonOUcWFIHVHUlhA