VIP Exclusive
CAP Certified Authorization Professional VIP Practice Exam II
CAP — The CAP (Certified Authorization Professional) is issued by (ISC)² and covers the NIST Risk Management Framework (RMF); the exam consists of 125 questions answered in 3 hours, with a passing score of 700 out of 1000 points across seven domains: RMF Overview, Categorization, Security Control Selection, Implementation, Assessment, Authorization, and Continuous Monitoring.
29
Questions
180m
Time Limit
70.00%
To Pass
Question 1 of 29👑 VIP
A federal agency's information system currently holds an Authorization to Operate (ATO). The agency acquires a new commercial cloud service that will process the same data. The ISSO wants to leverage the cloud provider's existing FedRAMP authorization rather than conducting a full independent assessment. Which concept BEST describes this approach, and what is the primary condition that must be met?
Questions 2–29 and full explanations are VIP-exclusive.