ISC2 Exam CAP Topic 7 Question 82 Discussion

Actual exam question for ISC2's Certified Authorization Professional exam

Question #: 82
Topic #: 7

[All Certified Authorization Professional Questions]

Which of the following statements correctly describes DIACAP residual risk?

AIt is the remaining risk to the information system after risk palliation has occurred.

BIt is a process of security authorization.

CIt is the technical implementation of the security design.

DIt is used to validate the information system.

Show Suggested Answer

Suggested Answer: A

by Raul at Apr 10, 2024, 06:22 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Comments

Submit Cancel

Rosenda

21 hours ago

I agree, it's not a straightforward question. I'm leaning towards option A, as it sounds like it's describing the concept of residual risk, which is the risk that remains after controls are put in place.

upvoted 0 times

...

Selma

2 days ago

This question seems a bit tricky. I'm not entirely sure about the correct answer, but I think it has something to do with the remaining risk after implementing risk mitigation measures.

upvoted 0 times

...