MENU
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, C, D, E, F
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has
been accredited in the Phase 3. The goal of this phase is to continue to operate and manage the
system and to ensure that it will maintain an acceptable level of residual risk. The
process activities of this phase are as follows:
System operations
Security operations
Maintenance of the SSAA
Change management
Compliance validation
Answer option B is incorrect. It is a Phase 3 activity.
13 comments · newest first
RE
Reuben
11 months ago
Really? I thought the focus would shift away from SSAA after Phase 3.
MA
Mari
12 months ago
I think maintaining the SSAA is crucial after accreditation.
TA
Tayna
12 months ago
Wait, isn't change management also part of this phase?
VI
Vi
12 months ago
Totally agree, compliance validation is key too!
CH
Cheryll
1 year ago
Post Accreditation is all about ongoing security operations.
GL
Glendora
1 year ago
I believe we discussed the importance of change management in this phase, so I might lean towards option C as well.
RO
Rosalind
1 year ago
I’m a bit confused about the difference between system operations and security operations. I hope I can remember which one applies here.
JO
Johnson
1 year ago
I remember practicing a question about the SSAA maintenance, so I feel confident that option F is correct.
TO
Tom
1 year ago
I think Phase 4 involves ongoing security operations, but I'm not entirely sure if compliance validation is also part of it.
JE
Jennifer
1 year ago
This is a good test of our knowledge of container image management. The key is to focus on the methods that allow you to copy or move images between different registries, whether that's through sync tools, storage endpoints, or other distribution mechanisms. I think I've got a handle on this.
BU
Burma
1 year ago
I'm feeling pretty confident about this one. Ensuring that program statuses are being updated seems like the best way to track the success of a program using a custom channel. Option C is my pick.
SA
Santos
1 year ago
Based on my understanding, out-of-band RAID configuration is typically supported by more advanced hardware. I'm guessing the answer is either A or C.
FR
Frederick
1 year ago
I practiced a similar question where we had to enable AD authentication for an app, and I think using Amazon Cognito might be a viable option too, but I'm a little confused about the specifics.