CAP Security Controls and Authorization

Question 1

What are the three security control baselines defined in NIST SP 800-53B?

Accepted Answer

Low, Moderate, High

Answer

Basic, Intermediate, Advanced

Answer

Tier 1, Tier 2, Tier 3

Answer

Minimal, Standard, Enhanced

Question 2

Which security control family in NIST SP 800-53 addresses access control?

Accepted Answer

AC

Answer

AU

Answer

CA

Answer

CM

Question 3

Control tailoring in NIST SP 800-53 allows organizations to do which of the following?

Accepted Answer

Adjust baseline controls to meet specific operational needs

Answer

Remove all baseline controls

Answer

Add only compensating controls

Answer

Ignore privacy controls

Question 4

Which NIST SP 800-53 control family specifically addresses audit and accountability?

Accepted Answer

AU

Answer

AT

Answer

CA

Answer

IR

Question 5

What is a compensating security control?

Accepted Answer

An alternative control providing equivalent protection when the primary control cannot be implemented

Answer

A control that replaces all other controls

Answer

A control applied only to high-impact systems

Answer

A control mandated by FISMA

Question 6

In the context of authorization, what does 'security control inheritance' mean?

Accepted Answer

A system leverages controls already implemented by a common control provider

Answer

A child system adopts the risk decisions of a parent system

Answer

An AO delegates authority to a subordinate

Answer

Security policies are copied from another agency