MENU
Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system?
Suggested Answer: A
Get Premium CAP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
KE
Kenneth
11 months ago
FITSAF? Never heard of it being a standard.
JE
Jenelle
12 months ago
Wait, SSAA? Is that even relevant here?
IR
Irving
12 months ago
Totally agree, TCSEC is the standard!
NI
Nicolette
12 months ago
I thought it was FIPS, though.
TW
Twana
1 year ago
It's definitely TCSEC.
VE
Verda
1 year ago
FITSAF seems less likely, but I can't remember what it specifically covers. I wish I had reviewed those standards more thoroughly!
SC
Scarlet
1 year ago
SSAA sounds familiar, but I can't recall if it specifically sets requirements for assessing controls. I might be mixing it up with something else.
JE
Jesus
1 year ago
I remember FIPS being mentioned in class, but I thought it was more about standards for federal information systems rather than assessing effectiveness.
JO
Jose
1 year ago
I think TCSEC might be the right answer since it deals with evaluating security controls, but I'm not completely sure.
TE
Tequila
1 year ago
I'm a little confused by this question. Idempotence? I'm not sure I fully understand what that means in this context. I'll have to think it through carefully and try to eliminate the answers that don't seem to fit the description.
VA
Val
1 year ago
The key here is that the amount of change is determined by the particular behavior being changed and its current incidence, so I'll go with option D.
CA
Cammy
1 year ago
I think I can handle this one. The key is to focus on the scope of the ABC Compile - is it at the inventory organization level, the individual subinventory level, or a combination of the two?
YO
Youlanda
1 year ago
I'm pretty confident that the answer is B, cost plus incentive fee. The incentive fee structure can lead the contractor to prioritize their own interests over the buyer's, making it the riskiest option.