MENU
Which of the following are the phases of the Certification and Accreditation (C&A) process?
Each correct answer represents a complete solution. Choose two.
Suggested Answer: B, C
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Certification and Accreditation (C&A) process consists of four distinct phases:
1.Initiation
2.Security Certification
3.Security Accreditation
4.Continuous Monitoring
The C&A activities can be applied to an information system at appropriate phases in the system
development life cycle by selectively tailoring
the various tasks and subtasks.
Answer options A and D are incorrect. Auditing and detection are not phases of the Certification and
Accreditation process.
13 comments · newest first
IR
Ira
11 months ago
Continuous Monitoring is definitely one of them!
TE
Teri
11 months ago
I thought Detection was a phase, but maybe not?
VE
Vernell
12 months ago
Wait, isn't Auditing part of it too?
BE
Benton
12 months ago
Totally agree with B!
EL
Eliseo
12 months ago
I think it's B and C.
GL
Glenn
1 year ago
I remember "Initiation" for sure, but I can't recall if "Detection" is a phase or just a part of the overall process.
LO
Louis
1 year ago
I’m a bit confused; I thought "Auditing" was part of the process, but now I’m not so sure if it’s one of the main phases.
PO
Polly
1 year ago
I feel like "Continuous Monitoring" was mentioned in a practice question we did, so that might be one of the answers too.
SA
Salena
1 year ago
I think I remember that "Initiation" is definitely one of the phases, but I'm not sure about the second one.
DO
Dorathy
1 year ago
I'm a little confused by the different storage account types. I'll need to research the differences between general-purpose, blob, and file storage to determine which one would be most appropriate for boot diagnostics.
TA
Tawna
1 year ago
Hmm, I'm not entirely sure about this one. I know Azure has a lot of cloud services, but I'm not certain if video conferencing is one of them. I'll have to think this through carefully.
RO
Royce
1 year ago
I'm feeling pretty confident about this one. Based on the options provided, "Process Evaluation" seems like the most relevant choice for how senior leaders can oversee decisions around developing resilience in a program.
EL
Elly
1 year ago
Ah, a classic cryptanalysis question. I remember learning about "rubber-hose" attacks in one of my security courses. I'm confident the answer is B - it's all about physically coercing the information out of someone.