CAP Federal Compliance and Regulatory Requirements

Question 1

Which federal law established the modern framework for federal information security and was significantly updated in 2014?

Accepted Answer

Federal Information Security Modernization Act (FISMA)

Answer

Privacy Act of 1974

Answer

Clinger-Cohen Act of 1996

Answer

Sarbanes-Oxley Act

Question 2

Which federal agency is responsible for issuing FIPS publications that federal agencies must comply with?

Accepted Answer

NIST

Answer

NSA

Answer

CISA

Answer

OMB

Question 3

OMB Circular A-130 provides federal policy guidance on which broad area?

Accepted Answer

Managing federal information resources, including IT security and privacy

Answer

Federal procurement rules

Answer

Congressional budget procedures

Answer

Federal hiring standards

Question 4

Which federal privacy law gives US citizens the right to access and correct records held by federal agencies?

Accepted Answer

Privacy Act of 1974

Answer

HIPAA

Answer

FERPA

Answer

COPPA

Question 5

Executive Order 13800 directed federal agencies to take what primary action regarding cybersecurity risk?

Accepted Answer

Use the NIST Cybersecurity Framework to manage institutional risk

Answer

Adopt zero-trust architecture immediately

Answer

Transfer all systems to commercial cloud

Answer

Eliminate all legacy systems within one year

Question 6

Under FISMA, which office provides policy guidance and oversight for federal information security programs?

Accepted Answer

OMB

Answer

NSA

Answer

CISA

Answer

GAO