FedRAMP Continuous Monitoring & Incident Response 5

Question 1

Which automated tool output is accepted by FedRAMP for vulnerability scanning of container-based infrastructure?

Accepted Answer

SCAP-validated or agency-approved container image scanners

Answer

FedRAMP accepts SCAP-validated tools and agency-approved container image scanners for vulnerability scanning of container environments.

Question 2

A CSP's POA&M shows a high vulnerability that is 45 days past its required remediation date. What must the CSP do?

Accepted Answer

Submit a remediation plan update and notify the AO of the delay

Answer

For overdue POA&M items, CSPs must update the remediation plan with revised dates and proactively notify the AO of any delays.

Question 3

What is the role of the FedRAMP PMO in the continuous monitoring of an agency-authorized (non-JAB) cloud system?

Accepted Answer

The PMO provides oversight tools and templates but the agency AO retains primary responsibility

Answer

For agency-authorized systems, the agency AO retains authority while the FedRAMP PMO provides standardized templates, tools, and program guidance.

Question 4

Which incident response activity is most critical for maintaining the chain of custody during a FedRAMP security investigation?

Accepted Answer

Documenting every action taken on evidence with timestamps and signatures

Answer

Chain of custody requires meticulous documentation of who handled evidence, when, and what actions were taken to ensure evidence integrity for potential legal proceedings.

Question 5

Under FedRAMP ConMon, when must a CSP perform a penetration test?

Accepted Answer

Annually and after significant changes

Answer

FedRAMP requires annual penetration testing as well as penetration testing following any significant changes to the authorization boundary.

(FedRAMP) Federal Risk and Authorization Management Program Certified Practice Test

(FedRAMP) Federal Risk and Authorization Management Program Certified Practice Test

FedRAMP Continuous Monitoring & Incident Response 5