CAP Risk Management Framework (RMF) 1

Question 1

What NIST publication provides the primary guidance for the Risk Management Framework (RMF)?

Accepted Answer

NIST SP 800-37

Answer

NIST SP 800-53

Answer

NIST SP 800-171

Answer

NIST SP 800-30

Question 2

Which step of the RMF involves selecting the appropriate security controls for an information system?

Accepted Answer

Select

Answer

Categorize

Answer

Implement

Answer

Assess

Question 3

In the RMF, which step involves determining the security category of the information system?

Accepted Answer

Categorize

Answer

Authorize

Answer

Monitor

Answer

Implement

Question 4

What is the primary output of the RMF Assess step?

Accepted Answer

Security Assessment Report

Answer

System Security Plan

Answer

Authorization to Operate

Answer

Plan of Action and Milestones

Question 5

Which federal law mandates the use of the RMF for federal information systems?

Accepted Answer

FISMA

Answer

HIPAA

Answer

FERPA

Answer

SOX

Question 6

The RMF Monitor step is primarily intended to provide what type of assurance?

Accepted Answer

Ongoing situational awareness

Answer

One-time certification

Answer

Initial risk acceptance

Answer

Control selection validation