CAP Compliance & Regulatory Standards 3

Question 1

Which Executive Order directed the development of the Cybersecurity Framework (CSF) by NIST?

Accepted Answer

EO 13636

Answer

Executive Order 13636 (Improving Critical Infrastructure Cybersecurity, 2013) directed NIST to develop the Cybersecurity Framework.

Question 2

Under the Privacy Act of 1974, which of the following is NOT a right afforded to individuals?

Accepted Answer

Right to financial compensation for all unauthorized disclosures

Answer

While the Privacy Act provides civil remedies, it does not guarantee financial compensation for all unauthorized disclosures—damages must be proven and intentional violations established.

Question 3

NIST SP 800-37 defines the RMF. Which step immediately follows the Categorize step?

Accepted Answer

Select

Answer

In the RMF, after categorizing the system (Step 1), the next step is to Select appropriate security controls (Step 2) based on the categorization.

Question 4

A contractor handling Controlled Unclassified Information (CUI) for DoD must comply primarily with which regulation?

Accepted Answer

NIST SP 800-171

Answer

NIST SP 800-171 specifies the security requirements for protecting CUI in nonfederal systems and organizations, making it the primary compliance standard for DoD contractors.

Question 5

Which standard defines the requirements for Payment Card Industry Data Security?

Accepted Answer

PCI DSS

Answer

PCI DSS (Payment Card Industry Data Security Standard) is the global standard mandating security controls for organizations that store, process, or transmit cardholder data.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Compliance & Regulatory Standards 3