Which of the following federal laws is designed to protect computer data from theft

A. Federal Information Security Management Act (FISMA)

B. Computer Fraud and Abuse Act (CFAA)

C. Government Information Security Reform Act (GISRA)

D. Computer Security Act

Which of the following guidelines is recommended for engineering, protecting, managing, processing, and controlling national security and sensitive (although unclassified) information A. Federal Information Processing Standard (FIPS)

B. Special Publication (SP)

C. NISTIRs (Internal Reports)

D. DIACAP by the United States Department of Defense (DoD)

Which of the following tools demands involvement by upper executives, in order to integrate quality into the business system and avoid delegation of quality functions to junior administrators

A. ISO 90012000

B. Benchmarking

C. SEI-CMM

D. Six Sigma

Which of the following phases of the ISSE model is used to determine why the system needs to be built and what information needs to be protected

A. Develop detailed security design

B. Define system security requirements

C. Discover information protection needs

D. Define system security architecture

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3 Each correct answer represents a complete solution. Choose all that apply.

A. Agree on a strategy to mitigate risks.

B. Evaluate mitigation progress and plan next assessment.

C. Identify threats, vulnerabilities, and controls that will be evaluated.

D. Document and implement a mitigation plan.