CAP Practice Test practice questions, page 14 of 16, with answer review and explanations.
Question 66
Which of the following roles is responsible for review and risk analysis of all contracts on a regular basis?
The Supplier Manager
The IT Service Continuity Manager
The Service Catalogue Manager
The Configuration Manager
Question 67
You are the project manager for the NHH project. You are working with your project team to examine the project from four different defined perspectives to increase the breadth of identified risks by including internally generated risks. What risk identification approach are you using in this example?
SWOT analysis
Root cause analysis
Assumptions analysis
Influence diagramming techniques
Question 68
Which of the following are included in Physical Controls? Each correct answer represents a complete solution. Choose all that apply.
Locking systems and removing unnecessary floppy or CD-ROM drives
Environmental controls
Password and resource management
Identification and authentication methods
Monitoring for intrusion
Controlling individual access into the facility and different departments
Question 69
Which of the following NIST Special Publication documents provides a guideline on network security testing?
NIST SP 800-60
NIST SP 800-53A
NIST SP 800-37
NIST SP 800-42
NIST SP 800-59
NIST SP 800-53
Question 70
Which one of the following is the only output for the qualitative risk analysis process?