Question 1

What is qualitative risk analysis primarily based on?

Options :

A : Data from system logs

B : Threat analysis

C : Penetration tests

D : Expert judgment

Answer: D

Question 2

Code signing is done using what?

Options :

A : File integrity checks

B : Encrypted source code

C : Public key cryptography and hash functions

D : Controlled distribution channels such as SSL

Answer: C

Question 3

The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems that handle U.S. national security information. What are the different types of NIACAP accreditation? Each correct answer represents a complete solution. Choose all that apply

Options :

A : Site accreditation

B : Type accreditation

C : Secure accreditation

D : System accreditation

Answer: A,B,D

Question 4

Which of the following organizations assists the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies?

Options :

A : OMB

B : NIST

C : NSA/CSS

D : DCAA

Answer: A

Question 5

Quantitative risk assessment differs from qualitative risk assessment in that it predicts attacks based on what?

Options :

A : Penetration tests

B : Historical loss information

C : Projections based on qualitative factors

D : Zero-day loss information

Answer: B

Free CSSLP Mock Exam – Practice Online Confidently

Buying Options: