FITSP Operator Study Test Questions and Correct Answers.

FITSP Operator Study Test Questions and
Correct Answers
Question 1
OMB IT Governance
Correct Answer
Policies and schedules for compliance.



Question 2
SP 800-27
Correct Answer
IT Security Engineering Principles.



Question 3
Worm
Correct Answer
Self-propagating malicious code.



Question 4
FedRAMP
Correct Answer
Program for security assessment of cloud service providers.



Question 5
SCAP Automation
Correct Answer
Provides consistency in vulnerability checks.




Page 1 of 34

,Question 6
Hybrid Encryption
Correct Answer
Combines symmetric and asymmetric techniques.



Question 7
Operational Controls
Correct Answer
Physical security and environmental controls.



Question 8
OMB Circular A-130
Correct Answer
Policy for managing federal information resources, including security and privacy
guidelines.



Question 9
FIPS 199 Impact Levels
Correct Answer
Low, Moderate, High.



Question 10
Firewall Layers
Correct Answer
Layer 3 (Packet Filtering), Layer 4 (Stateful), Layer 7 (Application).



Question 11
OMB Responsibilities
Correct Answer
Sets IT policy and reporting schedules.




Page 2 of 34

,Question 12
Security Incident Lifecycle
Correct Answer
Detect, Respond, Recover, Prevent.



Question 13
SP 800-27 Principles
Correct Answer
Secure system engineering best practices.



Question 14
Cybersecurity Act of 2014
Correct Answer
Enhances information sharing across sectors.



Question 15
Separation of Duties Principle
Correct Answer
Reduces risk of fraud or error.



Question 16
SP 800-41
Correct Answer
Guidelines for firewall management.



Question 17
SP 800-45
Correct Answer
Guidelines for securing email systems.




Page 3 of 34

, Question 18
Clinger-Cohen Act
Correct Answer
Established CIOs and Capital Planning Investment Control.



Question 19
Backdoor Detection
Correct Answer
Using HIDS or behavioral-based detection for suspicious activity.



Question 20
IDS vs IPS
Correct Answer
IDS detects threats, while IPS blocks them.



Question 21
Encryption Key Management
Correct Answer
Best practices for secure storage.



Question 22
Hybrid Encryption
Correct Answer
Combines symmetric and asymmetric encryption.



Question 23
NICE Framework
Correct Answer
Focuses on cybersecurity education and workforce development.




Page 4 of 34