Discuss ISC2 CAP Exam Topic 5 Question 43

Certification and Accreditation (C&A or CnA ) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?

Each correct answer represents a complete solution. Choose two.

AAccreditation is the official management decision given by a senior agency official to authorize operation of an information system.

BCertification is a comprehensive assessment of the management, operational, and technical security controls in an information system.

CAccreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.

DCertification is the official management decision given by a senior agency official to authorize operation of an information system.

Suggested Answer: A, B

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Carey 11 months ago

I’m surprised by how many mix up certification and accreditation!

Whitley 12 months ago

Totally agree with A and B! They nailed it.

Lorean 12 months ago

Wait, C sounds off. Accreditation isn’t an assessment, right?

Vicente 12 months ago

B is correct too! Certification covers all security controls.

Lynelle 1 year ago

A is definitely true! Accreditation is key for system operation.

Lizette 1 year ago

I thought certification was more about the assessment part, so I’m leaning towards A and B too, but I keep second-guessing myself on these terms.

Rikki 1 year ago

I practiced a similar question, and I think A and B are the answers. Accreditation is the decision, and certification is the assessment, right?

Talia 1 year ago

I remember that accreditation is about the official decision to allow a system to operate, so I think A is definitely correct.

Rene 1 year ago

I’m a bit confused about the difference between certification and accreditation. I think B sounds right, but I’m not sure about D.

Sean 1 year ago

I'm a little confused by the differences between the Blob storage options. Is there a significant advantage to using the Archive tier over just a regular Blob storage account with a retention policy? I'll need to research that a bit more.

Eleni 1 year ago

I'm a bit confused by the question. I'll need to reread it and consider the requirements for continuous uptime before answering.

ISC2 CAP Exam - Topic 5 Question 43 Discussion