CAP Security Controls and Authorization 2

Question 1

Which NIST SP 800-53 control family covers configuration management?

Accepted Answer

CM

Answer

The CM (Configuration Management) family includes controls for baseline configurations, change control, and software usage restrictions.

Question 2

What is the purpose of an Interconnection Security Agreement (ISA)?

Accepted Answer

To document the security requirements for a connection between two systems

Answer

An ISA establishes the security interface requirements and responsibilities when two systems are interconnected.

Question 3

Which document formally describes the security controls applied to a system and how they are implemented?

Accepted Answer

System Security Plan

Answer

The System Security Plan (SSP) comprehensively describes all security controls and their implementation details for the information system.

Question 4

Which control overlay in NIST SP 800-53 provides additional guidance for classified national security systems?

Accepted Answer

CNSS Instruction 1253 overlay

Answer

CNSSI 1253 provides the security categorization and control selection guidance for national security systems.

Question 5

What distinguishes a system-specific control from a hybrid control in NIST SP 800-53?

Accepted Answer

System-specific controls are implemented only for the local system; hybrid controls are shared and locally customized

Answer

Hybrid controls have portions implemented by a common control provider and portions implemented locally by the system owner.

CAP - Certified Accreditation Professional Practice Test