FedRAMP Risk Management Framework & Assessment

Question 1

What is the primary goal of the Risk Management Framework (RMF)?

Accepted Answer

Manage cybersecurity risks

Answer

To increase system costs

Answer

Ignore vulnerabilities

Answer

Delay system deployment

Question 2

Which FedRAMP step involves categorizing information systems?

Accepted Answer

Categorize systems

Answer

Implement

Answer

Monitor

Answer

Authorize

Question 3

What is the purpose of selecting security controls in RMF?

Accepted Answer

Select safeguards to mitigate risks

Answer

Ignore risks

Answer

Reduce budget

Answer

Accelerate deployment

Question 4

How does continuous monitoring support FedRAMP compliance?

Accepted Answer

Ongoing control assessment

Answer

Only during audits

Answer

Is optional

Answer

Delays response

Question 5

What is the role of the Security Assessment Report (SAR)?

Accepted Answer

Document control effectiveness

Answer

Ignore vulnerabilities

Answer

Replace security plan

Answer

Reduce risks automatically

Question 6

Why is authorization important in RMF?

Accepted Answer

Grant approval based on risk

Answer

To delay operations

Answer

Ignore security

Answer

Eliminate monitoring

Question 7

How does risk assessment inform decision-making?

Accepted Answer

Prioritize security efforts

Answer

Confuses managers

Answer

Is optional

Answer

Only for audits

Question 8

What is a key component of risk mitigation?

Accepted Answer

Implementing controls

Answer

Ignoring risks

Answer

Increasing vulnerabilities

Answer

Delaying actions

Question 9

Why is stakeholder involvement critical in RMF?

Accepted Answer

Ensures understanding and acceptance

Answer

Is unnecessary

Answer

Confuses communication

Answer

Slows process