FITSP - AUDITOR QUESTIONS WITH
ACCURATE SOLUTIONS!!
, Recovery Time Objective
Mean time between failures (mtbf)
(RTO)
Don't know?
2 of 258
Term
Name the components of the new risk management model.
a) Assess/mitigate/evaluate/terminate
b) Frame/assess/respond/monitor
c) Initiate/select/assess/authorize
Give this one a try later!
Unclassified Systems and Financial
Single, Joint, and Leveraged
Systems
Frame, Assess, Respond, and Express determination statements in
Monitor (FARM) the assessment procedures
Don't know?
3 of 258
Term
In which NIST special publication might you find guidance for the
measurement of mobile computers and devices that perform all
,cryptographic operations, using FIPS 140-2 validated cryptographic
modules, operating in approved modes of operation?
a) FIPS 140-2
b) SP 800-55
c) SP 800-53a
d) SP 800-115
Give this one a try later!
Baseline VLAN/Cold
AO and SAOP SP 800-55
Don't know?
4 of 258
Term
What are some of the threats that the information system faces?
a) Environmental disruptions
b) Human errors
c) Cyber-attacks
d) All of the above
Give this one a try later!
PKCS #7 and X.509 All of the above
, Control objectives Risk Assessment
Don't know?
5 of 258
Term
What is the required frequency of FISMA reporting feeds for CFO
Act agencies?
a) Monthly
b) Quarterly
c) Semi-annually
d) Annually
Give this one a try later!
Monthly Initiation
FedRAMP Cross—cut Shredding
Don't know?
6 of 258
Term
The measures provided in NIST SP 800-55, Performance
Measurement Guide for Information Systems, indicate:
a) The cost effectiveness of implemented common controls
ACCURATE SOLUTIONS!!
, Recovery Time Objective
Mean time between failures (mtbf)
(RTO)
Don't know?
2 of 258
Term
Name the components of the new risk management model.
a) Assess/mitigate/evaluate/terminate
b) Frame/assess/respond/monitor
c) Initiate/select/assess/authorize
Give this one a try later!
Unclassified Systems and Financial
Single, Joint, and Leveraged
Systems
Frame, Assess, Respond, and Express determination statements in
Monitor (FARM) the assessment procedures
Don't know?
3 of 258
Term
In which NIST special publication might you find guidance for the
measurement of mobile computers and devices that perform all
,cryptographic operations, using FIPS 140-2 validated cryptographic
modules, operating in approved modes of operation?
a) FIPS 140-2
b) SP 800-55
c) SP 800-53a
d) SP 800-115
Give this one a try later!
Baseline VLAN/Cold
AO and SAOP SP 800-55
Don't know?
4 of 258
Term
What are some of the threats that the information system faces?
a) Environmental disruptions
b) Human errors
c) Cyber-attacks
d) All of the above
Give this one a try later!
PKCS #7 and X.509 All of the above
, Control objectives Risk Assessment
Don't know?
5 of 258
Term
What is the required frequency of FISMA reporting feeds for CFO
Act agencies?
a) Monthly
b) Quarterly
c) Semi-annually
d) Annually
Give this one a try later!
Monthly Initiation
FedRAMP Cross—cut Shredding
Don't know?
6 of 258
Term
The measures provided in NIST SP 800-55, Performance
Measurement Guide for Information Systems, indicate:
a) The cost effectiveness of implemented common controls
