VIP Exclusive
CAP Certified Authorization Professional VIP Practice Exam III
CAP — The CAP (Certified Authorization Professional) is issued by (ISC)² and validates expertise in the NIST Risk Management Framework (RMF); the exam consists of 125 multiple-choice questions with a 3-hour time limit and a passing score of 700/1000 points (70%). Note: (ISC)² retired the CAP in 2024, replacing it with the CGRC (Certified in Governance, Risk and Compliance), which covers the same core RMF domains.
53
Questions
180m
Time Limit
70.00%
To Pass
Question 1 of 53👑 VIP
An authorizing official (AO) at a federal agency receives a security authorization package for a new cloud-hosted payroll system. The package includes a System Security Plan (SSP), a Security Assessment Report (SAR), and a Plan of Action and Milestones (POA&M). Upon review, the AO notes that several high-severity findings from the SAR remain open on the POA&M with remediation milestones exceeding 90 days. What is the MOST appropriate action for the AO to take?
Questions 2–53 and full explanations are VIP-exclusive.