CAP Federal Compliance and Regulatory Requirements 2

Question 1

Which regulation governs the security requirements for protecting Controlled Unclassified Information (CUI) in non-federal systems?

Accepted Answer

NIST SP 800-171

Answer

NIST SP 800-171 establishes requirements for protecting CUI in nonfederal systems and organizations, particularly for DoD contractors.

Question 2

What does the term 'Controlled Unclassified Information' (CUI) refer to?

Accepted Answer

Information the government requires safeguarding per law, regulation, or policy, but is not classified

Answer

CUI is sensitive government information that requires protection but does not meet the threshold for national security classification.

Question 3

Which federal law requires agencies to conduct Privacy Impact Assessments for new information technology systems?

Accepted Answer

E-Government Act of 2002

Answer

Section 208 of the E-Government Act of 2002 mandates PIAs before agencies develop or procure new IT systems that collect PII.

Question 4

CISA plays which primary role in federal cybersecurity compliance?

Accepted Answer

Coordinates federal civilian cybersecurity defense and leads incident response

Answer

CISA (Cybersecurity and Infrastructure Security Agency) leads the national effort to defend civilian federal networks and coordinate incident response.

Question 5

The Federal Risk and Authorization Management Program (FedRAMP) standardizes security authorizations for which type of systems?

Accepted Answer

Cloud computing products and services used by federal agencies

Answer

FedRAMP provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud services used by the federal government.

CAP - Certified Accreditation Professional Practice Test

CAP - Certified Accreditation Professional Practice Test

CAP Federal Compliance and Regulatory Requirements 2