FedRAMP Security Authorization & Compliance

Question 1

What is the purpose of security authorization in FedRAMP?

Accepted Answer

Grant approval after risk acceptance

Answer

To delay system use

Answer

Ignore security risks

Answer

Reduce system functionality

Question 2

Who typically issues the authorization to operate (ATO)?

Accepted Answer

Senior agency official

Answer

System user

Answer

Contractor

Answer

Vendor

Question 3

What does compliance ensure in FedRAMP?

Accepted Answer

Meets security controls

Answer

Optional guidelines

Answer

Slows deployment

Answer

Increases risk

Question 4

What is a Plan of Actions and Milestones (POA&M)?

Accepted Answer

Tracks security fixes

Answer

Marketing plan

Answer

User manual

Answer

System blueprint

Question 5

Why is evidence collection important for authorization?

Accepted Answer

Proves control effectiveness

Answer

Is unnecessary

Answer

Only for audits

Answer

Confuses assessors

Question 6

How often must authorization be reviewed?

Accepted Answer

Periodically reviewed

Answer

Never

Answer

Only once

Answer

Every month

Question 7

What is the role of continuous compliance monitoring?

Accepted Answer

Ensures ongoing security

Answer

Is optional

Answer

Delays reporting

Answer

Increases risks

Question 8

Who is responsible for maintaining compliance?

Accepted Answer

System owners/operators

Answer

End users

Answer

Auditors only

Answer

Contractors only

Question 9

What happens if a system is non-compliant?

Accepted Answer

Lose authorization

Answer

No impact

Answer

Increase budget

Answer

Improve performance