CAP Risk Management Framework

Question 1

Which NIST publication provides the primary guidance for the Risk Management Framework (RMF) used in CAP?

Accepted Answer

NIST SP 800-37

Answer

NIST SP 800-53

Answer

NIST SP 800-171

Answer

NIST SP 800-30

Question 2

What is the correct order of the first three steps in the NIST RMF?

Accepted Answer

Prepare, Categorize, Select

Answer

Categorize, Select, Implement

Answer

Select, Implement, Assess

Answer

Prepare, Select, Categorize

Question 3

Which RMF step involves choosing security controls from NIST SP 800-53?

Accepted Answer

Select

Answer

Implement

Answer

Assess

Answer

Authorize

Question 4

What document formally records the selected security controls for an information system during the RMF?

Accepted Answer

System Security Plan (SSP)

Answer

Plan of Action and Milestones (POA&M)

Answer

Security Assessment Report (SAR)

Answer

Authorization to Operate (ATO)

Question 5

In the RMF, which step involves the Authorizing Official making an accept/reject risk decision?

Accepted Answer

Authorize

Answer

Assess

Answer

Monitor

Answer

Select

Question 6

Which NIST publication provides guidance on security and privacy controls referenced during the RMF Select step?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-37

Answer

NIST SP 800-60

Answer

NIST SP 800-39