ISC2 CAP PRACTICE TEST QUESTIONS: 1 - 50 With 100% SOLVED Answers

1. Continuously observing and evaluating the information system security controls during the system life cycle to determine whether changes have occurred that will negatively impact the system security" best describes which process in the certification and accreditation methodology? a. Continuous monitoring b. Continuous improvement c. Continuous management d. Continuous development - ANSWER-Continuous monitoring 2. Which one of the following activities is not a component of the continuous monitoring process? a. Operation and maintenance b. Security control monitoring and impact analyses c. Status reporting and documentation d. Configuration management and control - ANSWER-Operation and maintenance 3. Which one of the following publications provides details of the continuous monitoring process? a. NIST SP 800-14 b. NIST SP 800-42 c. NIST SP 800-37 d. NIST SP 800-41 - ANSWER-NIST SP 800-37 4. Which one of the following best describes when continuous monitoring takes p