CAP Security Control Implementation

Question 1

What document serves as the primary guide for implementing security controls in an information system?

Accepted Answer

System Security Plan (SSP)

Answer

The System Security Plan documents how security controls are planned and implemented, serving as the authoritative reference for control implementation.

Question 2

Which NIST publication provides the comprehensive catalog of security and privacy controls for federal information systems?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-53 provides the catalog of security and privacy controls that organizations select from when building their control baseline.

Question 3

What type of security control is implemented centrally by an organization and inherited by multiple information systems?

Accepted Answer

Common control

Answer

Common controls are security controls whose implementation results in a capability that is inherited by one or more organizational information systems.

Question 4

When a required security control cannot be implemented as specified in the baseline, what alternative mechanism may be used with appropriate documentation?

Accepted Answer

Compensating control

Answer

Compensating controls are alternative management, operational, or technical safeguards employed when standard control implementation is not feasible.

Question 5

In the NIST Risk Management Framework, which step directly follows the selection of security controls?

Accepted Answer

Implement security controls

Answer

The NIST RMF Step 4 (Implement) follows Step 3 (Select), requiring organizations to implement the selected controls before they can be assessed.

CAP - Certified Accreditation Professional Practice Test

CAP - Certified Accreditation Professional Practice Test

CAP Security Control Implementation