CAP Certified Authorization Professional Practice Questions

Mark works as a project manager for TechSoft Inc. Mark, the project team, and the key project stakeholders have completed a round of qualitative risk analysis. He needs to update the risk register with his findings so that he can communicate the risk results to the project stakeholders - including management.

Mark will need to update all of the following information except for which one?

What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?

Neil works as a project manager for SoftTech Inc. He is working with Tom, the COO of his company, on several risks within the project. Tom understands that through qualitative analysis Neil has identified many risks in the project. Tom's concern, however, is that the priority list of these risk events are sorted in "high-risk," "moderate-risk," and "low-risk" as conditions apply within the project. Tom wants to know that is there any other objective on which Neil can make the priority list for project risks.

What will be Neil's reply to Tom?

Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls?

Rob is the project manager of the IDLK Project for his company. This project has a budget of $5,600,000 and is expected to last 18 months. Rob has learned that a new law may affect how the project is allowed to proceed - even though the organization has already invested over $750,000 in the project.

What risk response is the most appropriate for this instance?

You are the project manager of the NNQ Project for your company and are working you’re your project team to define contingency plans for the risks within your project. Mary, one of your project team members, asks what a contingency plan is.

Which of the following statements best defines what a contingency response is?

Where can a project manager find risk-rating rules?

Which of the following assessment methodologies defines a six-step technical security evaluation?

Which of the following refers to the ability to ensure that the data is not modified or tampered with?