最新のCGRC問題集で試験を準備する

ISC CGRC 試験概要:

ISC CGRC 試験シラバストピック:

ISC Certified in Governance Risk and Compliance 認定 CGRC 試験問題：

問題 #1

Amy is the project manager for her company. In her current project the organization has a very low tolerance for risk events that will affect the project schedule. Management has asked Amy to consider the affect of all the risks on the project schedule.
What approach can Amy take to create a bias against risks that will affect the schedule of the project? Response:

A. She can filter all risks based on their affect on schedule versus other project objectives.
B. She can have the project team pad their time estimates to alleviate delays in the project schedule.
C. She can shift risk-laden activities that affect the project schedule from the critical path as much as possible.
D. She can create an overall project rating scheme to reflect the bias towards risks that affect the project schedule.

問題 #2

All components of an information system to be authorized for operation by an authorizing official and excludes separately authorized systems, to which the information system is connected best defines:
Response:

A. Authorization Boundary
B. System Boundary
C. Creditation Boundary
D. Network Boundary

問題 #3

Which of the following is not a part of Identify Risks process? Response:

A. Cause and effect diagram
B. Decision tree diagram
C. System or process flow chart
D. Influence diagram

問題 #4

What publication implements the Computer Security act and defines sensitivity? Response:

A. OMB Circular A-136
B. OMB Circular A-133
C. OMB Circular A-123
D. OMB Circular A-130

問題 #5

Security control assessors can reuse past assessment results to satisfy the annual FISMA security assessment requirement provided the assessment results are:
CHOOSE ALL THAT APPLY
Response:

A. Current
B. Obtained by assessors with the required degree of independence
C. Relevant to the determination of control effectivemess
D. Complete

解説：