CAP 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which of the following evidences are the collection of facts that, when considered together, can be used to infer a conclusion about the malicious activity/person?

A.Circumstantial
B.Incontrovertible
C.Direct
D.Corroborating

正解:

Question No : 2
You work as a project manager for BlueWell Inc. You are currently working with the project stakeholders to identify risks in your project. You understand that the qualitative risk assessment and analysis can reflect the attitude of the project team and other stakeholders to risk. Effective assessment of risk requires management of the risk attitudes of the participants.
What should you, the project manager, do with assessment of identified risks in consideration of the attitude and bias of the participants towards the project risk?

A.Document the bias for the risk events and communicate the bias with management
B.Evaluate and document the bias towards the risk events
C.Evaluate the bias through SWOT for true analysis of the risk events
D.Evaluate the bias towards the risk events and correct the assessment accordingly

正解:

Question No : 3
You work as the project manager for Bluewell Inc. You are working on NGQQ Projectyou’re your company. You have completed the risk analysis processes for the risk events. You and the project team have created risk responses for most of the identified project risks.
Which of the following risk response planning techniques will you use to shift the impact of a threat to a third party, together with the responses?

A.Risk acceptance
B.Risk avoidance
C.Risk transference
D.Risk mitigation

正解:

Question No : 4
You are the project manager of the NKQ project for your organization. You have completed the quantitative risk analysis process for this portion of the project.
What is the only output of the quantitative risk analysis process?

A.Probability of reaching project objectives
B.Risk contingency reserve
C.Risk response
D.Risk register updates

正解:

Question No : 5
During qualitative risk analysis you want to define the risk urgency assessment. All of the following are indicators of risk priority except for which one?

A.Risk rating
B.Warning signs
C.Cost of the project
D.Symptoms

正解:

Question No : 6
Tom is the project manager for his organization. In his project he has recently finished the risk response planning. He tells his manager that he will now need to update the cost and schedule baselines.
Why would the risk response planning cause Tom the need to update the cost and schedule baselines?

A.New or omitted work as part of a risk response can cause changes to the cost and/or schedule baseline.
B.Risk responses protect the time and investment of the project.
C.Baselines should not be updated, but refined through versions.
D.Risk responses may take time and money to implement.

正解:

Question No : 7
The IAM/CA makes certification accreditation recommendations to the DAA. The DAA issues accreditation determinations.
Which of the following are the accreditation determinations issued by the DAA? Each correct answer represents a complete solution. Choose all that apply.
A. IATO
B. ATO
C. IATT
D. ATT
E. DATO

正解: ABCE

Question No : 8
Your organization has a project that is expected to last 20 months but the customer would really like the project completed in 18 months. You have worked on similar projects in the past and believe that you could fast track the project and reach the 18 month deadline.
What increases when you fast track a project?

A.Risks
B.Costs
C.Resources
D.Communication

正解:

Question No : 9
Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements?

A.Chief Information Security Officer
B.Senior Management
C.Information Security Steering Committee
D.Business Unit Manager

正解:

Question No : 10
Which of the following concepts represent the three fundamental principles of information security? Each correct answer represents a complete solution. Choose three.

A.Privacy
B.Integrity
C.Availability
D.Confidentiality

正解:

Question No : 11
A project team member has just identified a new project risk. The risk event is determined to have significant impact but a low probability in the project. Should the risk event happen it'll cause the project to be delayed by three weeks, which will cause new risk in the project.
What should the project manager do with the risk event?

A.Add the identified risk to a quality control management control chart.
B.Add the identified risk to the risk register.
C.Add the identified risk to the issues log.
D.Add the identified risk to the low-level risk watchlist.

正解:

Question No : 12
What component of the change management system is responsible for evaluating, testing, and documenting changes created to the project scope?

A.Configuration Management System
B.Project Management Information System
C.Scope Verification
D.Integrated Change Control

正解:

Question No : 13
You work as a project manager for SoftTech Inc. You are working with the project stakeholders to begin the qualitative risk analysis process.
You will need all of the following as inputs to the qualitative risk analysis process except for which one?

A.Risk management plan
B.Risk register
C.Stakeholder register
D.Project scope statement

正解:

Question No : 14
Jeff, a key stakeholder in your project, wants to know how the risk exposure for the risk events is calculated during quantitative risk analysis. He is worried about the risk exposure which is too low for the events surrounding his project requirements.
How is the risk exposure calculated?

A.The probability of a risk event plus the impact of a risk event determines the true risk expo sure.
B.The risk exposure of a risk event is determined by historical information.
C.The probability of a risk event times the impact of a risk event determines the true risk exposure.
D.The probability and impact of a risk event are gauged based on research and in-depth analysis.

正解:

Question No : 15
An Authorizing Official plays the role of an approver.
What are the responsibilities of an Authorizing Official? Each correct answer represents a complete solution. Choose all that apply.

A.Establishing and implementing the organization's continuous monitoring program
B.Determining the requirement of reauthorization and reauthorizing information systems when required
C.Reviewing security status reports and critical security documents
D.Ascertaining the security posture of the organization's information system

正解:

ISC CAP 問題練習