CAP Represents Practice Questions

DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply.

Select 4 answers.

• AA. Accreditation
• BB. Identification
• CC. System Definition
• DD. Verification
• EE. Validation
• FF. Re-Accreditation

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose all that apply.

Select 4 answers.

• AA. Pre-certification
• BB. Certification
• CC. Post-certification
• DD. Authorization
• EE. Post-Authorization

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3? Each correct answer represents a complete solution. Choose all that apply.

Select 3 answers.

• AA. Identify threats, vulnerabilities, and controls that will be evaluated.
• BB. Document and implement a mitigation plan.
• CC. Agree on a strategy to mitigate risks.
• DD. Evaluate mitigation progress and plan next assessment.