MENU
Which of the following are the phases of the Certification and Accreditation (C&A) process?
Each correct answer represents a complete solution. Choose two.
Suggested Answer: B, C
Get Premium ISSAP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
1.Initiation
2.Security Certification
3.Security Accreditation
4.Continuous Monitoring
The C&A activities can be applied to an information system at appropriate phases in the system development life cycle by selectively tailoring
the various tasks and subtasks.
Answer options D and A are incorrect. Auditing and detection are not phases of the Certification and Accreditation process.
13 comments · newest first
EL
Ellsworth
11 months ago
Yeah, I agree with Initiation and Continuous Monitoring!
RO
Rory
12 months ago
Wait, are you guys sure about Continuous Monitoring?
BE
Bette
12 months ago
Initiation is a phase, for sure!
GE
Gerald
12 months ago
I thought Auditing was part of it too?
GI
Gilma
1 year ago
Continuous Monitoring is definitely one of them.
JU
Julene
1 year ago
I’m leaning towards Continuous Monitoring and Initiation, but I have a nagging feeling about Auditing being important too.
AR
Arletta
1 year ago
I practiced a similar question, and I think Detection was mentioned there, but it feels like it could be a trick option.
BE
Beatriz
1 year ago
I remember studying the C&A process, and I feel like Auditing might be related, but I can't recall if it's an actual phase.
KA
Karol
1 year ago
I think Continuous Monitoring is definitely one of the phases, but I'm not sure about the second one. Maybe Initiation?
ME
Merlyn
1 year ago
Okay, I think I've got this. Implementing ARP ACLs and enabling ARP inspection on the end-user VLAN should be the minimum steps to mitigate the invalid MAC address issue.
CA
Carman
1 year ago
This looks straightforward to me. I'm pretty confident I can identify the product and project risks based on the descriptions provided.
SH
Sherell
1 year ago
If I recall correctly, Citrix Virtual Apps and Desktops could be tied into ADM implementation, but I really can't remember the details.
JA
Jamie
1 year ago
There was a practice question similar to this, and I think the bank needs to have a comprehensive risk assessment for all transactions, not just new ones.