CMM Technology & Digital Government 2 — Questions and Answers
Question 1: Which framework is most widely used by local governments to assess and manage cybersecurity risks?
- ISO 27001
- NIST Cybersecurity Framework (Correct answer)
- COBIT 5
- SOC 2 Type II
Correct answer: NIST Cybersecurity Framework
The NIST Cybersecurity Framework is the most widely adopted standard in U.S. local government for identifying, protecting, detecting, responding to, and recovering from cyber threats.
Question 2: A municipality wants to consolidate its IT infrastructure to reduce costs and improve scalability. Which approach best describes moving services to shared computing resources accessible over the internet?
- Virtualization
- Cloud migration (Correct answer)
- Colocation
- Edge computing
Correct answer: Cloud migration
Cloud migration moves government services and data to remote servers hosted on the internet, enabling scalability and cost reduction through shared infrastructure.
Question 3: What is the primary purpose of a municipality's IT disaster recovery plan?
- Prevent all cyberattacks before they occur
- Restore critical systems and data after a disruptive event (Correct answer)
- Train staff on cybersecurity best practices
- Audit vendor contracts for compliance
Correct answer: Restore critical systems and data after a disruptive event
A disaster recovery plan focuses on restoring IT systems and data to operational status after an incident such as a cyberattack, natural disaster, or system failure.
Question 4: Which term describes the practice of governments publishing datasets in machine-readable formats for public use without restrictions?
- Data governance
- Open data (Correct answer)
- Data warehousing
- Metadata management
Correct answer: Open data
Open data refers to publicly available government datasets released in accessible, machine-readable formats to promote transparency and civic innovation.
Question 5: A city manager is evaluating a new ERP system for the municipality. What does ERP stand for?
- Electronic Records Protocol
- Enterprise Resource Planning (Correct answer)
- Emergency Response Platform
- Expanded Reporting Program
Correct answer: Enterprise Resource Planning
Enterprise Resource Planning (ERP) systems integrate core government functions such as finance, HR, and procurement into a single platform.
Question 6: Under the Americans with Disabilities Act (ADA), municipal websites must comply with which web accessibility standard?
- WCAG 2.1 Level AA (Correct answer)
- Section 504 Level B
- ISO 9001 Web Standard
- NIST SP 800-53
Correct answer: WCAG 2.1 Level AA
WCAG 2.1 Level AA is the accessibility standard referenced in ADA guidance for ensuring government websites are usable by people with disabilities.
Question 7: Which procurement strategy allows multiple vendors to compete for individual task orders under a pre-negotiated master agreement, commonly used for technology purchases?
- Sole-source contracting
- Cooperative purchasing
- Indefinite Delivery/Indefinite Quantity (IDIQ) contract (Correct answer)
- Request for Quotation (RFQ)
Correct answer: Indefinite Delivery/Indefinite Quantity (IDIQ) contract
IDIQ contracts establish pre-negotiated terms with one or more vendors, allowing agencies to issue task orders as needs arise without re-bidding each time.
CMM Technology & Digital Government 2
Which framework is most widely used by local governments to assess and manage cybersecurity risks?