Fedramp - Study guides, Class notes & Summaries

What is included in the Plan of Action and Milestones (POA&M) that is presented in the Authorizing Official (AO) as part of the initial authorization package? A. All items identified throughout the Risk Management Framework (RMF) process B. Only volatile findings that require prioritization in remediation C. Deficiencies that have not yet been remediate and verified throughout the Risk Management Framework (RMF) process D. Only findings that have evaluated as moderate or high - Answer Defic...

The following legislation requires federal agencies to establish capital planning and investment control policies and procedures when procuring information technology: a) E-Government Act of 2002 b) Federal Information Security Management Act (FISMA) c) Government Information Security Reform Act (GISRA) d) Clinger-Cohen Act - Answer- Clinger-Cohen Act The following legislation requires federal agencies to appoint a Chief Information Officer: a) E-Government Act of 2002 b) Federal Inform...

WGU C836 Fundamentals of Information Security 100% CORRECT RATED A+Define the confidentiality, integrity, availability (CIA) triad. the core model of all of information security Differentiate confidentiality, integrity, and availability. Confidential is allowing only those authorized to access the data requested. Integrity is keeping data unaltered by Accidental or Malicious intent. Availability is the ability to access data when needed. 01:04 01:17 Define information secur...

Cloud computing models Infrastructure as a servicenPlatform as a servicenSoftware as a service Assuarance programs AWS complies with SOC 1/ISAE 3402, SOC 2, SOC3nFSIMA, DIACAP, FedRAMPnPCI DSS level 1nISO 9001, 27001, 27018 Amazon EC2 Container Service (ECS) Highly–scalable, high–performance container management service that supports Docker.nAllows to easily run applications on a managed cluster of EC2 instances Amazon EC2 Container Registry (ECR) A fully managed Docker contai...

What elements are components of an information system? - Answer- OMB Circular A-130, App III: "A system normally includes hardware, software, information, data, applications, communications, and people." What are some of the threats that the information system faces? - Answer- NIST SP 800-39rl, p. 1: "Threats to information and information systems can include purposeful attacks, environmental disruptions, and human/machine errors and result in great harm to the national and economic securi...

- ANSWER stages of a forensics examination: Evaluation: Includes receiving instructions, clarifying the instructions, completing risk analysis, and allocating resources 3DES - ANSWER a symmetrical cipher. Three encryption keys of various lengths are used. The first key is used to encrypt a block of data, a second key is then used to decrypt the block, and a third key is used to encrypt it again AES - ANSWER Advanced Encryption Standard. This is a symmetrical block cipher. AEShas been appr...