1. B
Ensures systems meet security and risk management standards as defined in RMF.
2. B
Continuous monitoring maintains ongoing assurance of control effectiveness.
3. B
NIST SP 800-37 defines the RMF, the foundation of CAP certification.
4. B
Stakeholder identification ensures clear communication and accountability.
5. C
Security categorization determines system impact levels per FISMA.
6. B
The Security Plan is created during the selection of controls.
7. B
Authorization package includes SSP, SAR, and POA&M supporting the AO’s decision.
8. B
Scenario-based workshops best engage adult learners with practical relevance.
9. B
The AO approves or denies system operation based on risk acceptance.
10. B
Self-directed learning and mentoring enhance retention in adult learners.
11. B
Adult learners connect best through real-world relevance and context.
12. A
Pre- and post-assessments measure training effectiveness quantitatively.
13. B
Guided questioning encourages independent critical thinking.
14. B
CAP compliance aligns with federal frameworks like FISMA and NIST.
15. B
Performance objectives define measurable mastery outcomes.
16. A
Kirkpatrick’s model assesses effectiveness across four measurable levels.
17. B
Timely, constructive feedback improves continuous learning outcomes.
18. B
Personnel Security (PS) controls ensure vetted, trustworthy individuals.
19. B
Interactive simulations encourage engagement and practical application.
20. B
Assessing controls ensures they function as intended and mitigate risk.
21. A
POA&M tracks mitigation of identified vulnerabilities and weaknesses.
22. B
Effective communication in CAP relies on transparency and feedback.
23. A
Compliance with FISMA is achieved by following NIST’s RMF guidance.
24. B
Differentiated instruction supports learners at various experience levels.
25. B
Formative evaluations occur mid-training to improve instructional methods.
26. B
Continuous monitoring maintains adaptive, real-time risk awareness.
27. B
Adult learning emphasizes experiential and practical engagement.
28. B
Interactive discussions support comprehension of evolving regulations.
29. B
Findings document effectiveness and expose remaining vulnerabilities.
30. B
Active listening strengthens mentor-mentee trust and communication.
31. A
Bloom’s Taxonomy promotes higher-order cognitive skills in CAP learning.
32. B
The AO formally authorizes system operation after reviewing risk evidence.
33. B
Self-assessment encourages self-directed, reflective professional growth.
34. A
Management controls define the organizational policies, standards, and procedures that govern how security is implemented and maintained within systems under CAP oversight.
35. B
Continuous learning ensures that CAP-certified professionals remain up to date with evolving regulatory frameworks, cybersecurity best practices, and RMF revisions to sustain long-term effectiveness.
Job seekers preparing for pre-employment screening can practice with our KPA assessment 2026, designed to match the problem-solving, numerical, and verbal reasoning formats used by major employers.
Prepare for the CAP - Certified Authorization Professional exam with our free practice test modules. Each quiz covers key topics to help you pass on your first try.