Multiple Choice
Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution. Choose two.
A) Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
B) Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
C) Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
D) Certification is the official management decision given by a senior agency official to authorize operation of an information system.
Correct Answer:
Verified
Correct Answer:
Verified
Q76: Which of the following is a risk
Q77: During qualitative risk analysis you want to
Q78: Joan is the project manager of the
Q79: Which of the following approaches can be
Q80: Which of the following requires all general
Q82: Adrian is the project manager of the
Q83: You are the project manager of the
Q84: Which of the following system security policies
Q85: Which of the following RMF phases identifies
Q86: In what portion of a project are