Fitsp a - Study guides, Class notes & Summaries

FITSP-A Exam Questions and Answers

FITSP-A Module 10 Questions with complete solution 2023/20241. What is defined as a simulation of an emergency designed to validate the viability of one or more aspects of an ISCP? a) ISCP Test b) ISCP Exercise c) ISCP Training d) ISCP Drill - correct answer Correct answer: b) ISCP Exercise NIST SP 800-34rl, Paragraph 3.5.3 states: "An exercise is a simulation of an emergency designed to validate the viability of one or more aspects of an ISCP." Incorrect answers: a) ISCP Testing t...

FITSP-A Exam Questions and Answers What elements are components of an information system? - Answer ️️ -OMB Circular A-130, App III: "A system normally includes hardware, software, information, data, applications, communications, and people." What are some of the threats that the information system faces? - Answer ️️ -NIST SP 800- 39rl, p. 1: "Threats to information and information systems can include purposeful attacks, environmental disruptions, and human/machine errors and res...

FITSP-A Module 3 Question and answers 2023/2024 verified to pass1. What elements are components of an information system? a) Hardware and software b) Interconnected systems c) People d) All of the above - correct answer Correct answer: d) All of the above OMB Circular A-130, App ill: "A system normally includes hardware, software, information, data, applications, communications, and people.' Incorrect answers: The individual choices alone do not constitute a system. Information systems ...

FITSP-A Module 9 Question and answers rated A+ 2023/2024 1. All of the following are considered remote access, EXCEPT: a) Dial-up b) Broadband c) VPN d) Wireless - correct answer Correct answer: c) VPN NIST SP 800-53r4, Control AC-17, Supplemental Guidance states: "Remote access methods include, for example, dial-up, broadband, and wireless. Organizations often employ encrypted virtual private networks (VPNs) to enhance confidentiality and integrity over remote connections." Incorr...

FITSP-A Module 7 Question and answers already passed 2023/2024 1. Name the reporting tool, which automates Agency FISMA reporting directly to the DHS. a) FISMA b) DHS Reporting Metrics c) Cyberscope d) Cyberstat - correct answer Correct answer: c) CyberScope. In OMB M-10-15, CyberScope was designated as the reporting tool for FISMA reporting. Incorrect answers: a) FISMA requires the reports; b) DHS Reporting Metrics indicate what must be reported; d) CyberStat refers to OMB's revie...

FITSP-A Module 8 Question and answers 100% correct 2023/2024 1. The implementation of a continuous monitoring program results in ongoing updates to all of the following documents, EXCEPT: a) Security Plan b) Security Assessment Plan c) Security Assessment Report d) Plan of Action & Milestones - correct answer Correct answer: b) Security Assessment Plan NIST SP 800-137, Chapter 1 states: "Frequent updates to security plans, security assessment reports, plans of action and milestones, h...

FITSP-M Exam Questions and Answers (Graded A) The Privacy Act of 1974 established policy objectives to protect... - Answer ️️ -Personally Identifiable Information (PII) Four Objectives: -Restrict Disclosure -Increased rights of access to agency records -Grant individuals the right to seek amendment -Establish a code of fair information practices The Paperwork Reduction Act of 1980 granted... - Answer ️️ -OMB responsibility for creating Policies, helping other agencies comply wit...