ISC2 CAP Exam - Topic 5 Question 43 Discussion

Actual exam question for ISC2's CAP exam

Question #: 43
Topic #: 5

[All CAP Questions]

Certification and Accreditation (C&A or CnA ) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?

Each correct answer represents a complete solution. Choose two.

AAccreditation is the official management decision given by a senior agency official to authorize operation of an information system.

BCertification is a comprehensive assessment of the management, operational, and technical security controls in an information system.

CAccreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.

DCertification is the official management decision given by a senior agency official to authorize operation of an information system.

Show Suggested Answer

Suggested Answer: A, B

by Mireya at May 07, 2022, 05:17 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carey

5 months ago

I’m surprised by how many mix up certification and accreditation!

upvoted 0 times

...

Whitley

6 months ago

Totally agree with A and B! They nailed it.

upvoted 0 times

...

Lorean

6 months ago

Wait, C sounds off. Accreditation isn’t an assessment, right?

upvoted 0 times

...

Vicente

6 months ago

B is correct too! Certification covers all security controls.

upvoted 0 times

...

Lynelle

6 months ago

A is definitely true! Accreditation is key for system operation.

upvoted 0 times

...

Lizette

6 months ago

I thought certification was more about the assessment part, so I’m leaning towards A and B too, but I keep second-guessing myself on these terms.

upvoted 0 times

...

Rikki

6 months ago

I practiced a similar question, and I think A and B are the answers. Accreditation is the decision, and certification is the assessment, right?

upvoted 0 times

...

Talia

6 months ago

I remember that accreditation is about the official decision to allow a system to operate, so I think A is definitely correct.

upvoted 0 times

...

Rene

6 months ago

I’m a bit confused about the difference between certification and accreditation. I think B sounds right, but I’m not sure about D.

upvoted 0 times

...

Sean

6 months ago

I'm a little confused by the differences between the Blob storage options. Is there a significant advantage to using the Archive tier over just a regular Blob storage account with a retention policy? I'll need to research that a bit more.

upvoted 0 times

...

Eleni

6 months ago

I'm a bit confused by the question. I'll need to reread it and consider the requirements for continuous uptime before answering.

upvoted 0 times

...