___________________________ is a part of the U.S. Department of Commerce, and it includes
an Information Technology Laboratory (ITL). correct answers NIST National Institute of
Standards and Technology.
What does TIC stand for? correct answers Trusted Internet Connection
What does USA Patriot Act stand for? correct answers United & Strengthening America by
providing appropriate tools required to intercept and obstruct terrorism
What does FISMA stand for? correct answers Federal Information Security Management Act
(2002)
-Passed to improve the security and privacy of sensitive information in federal computer systems
and to establish a minimum acceptable security practice for such systems
What does DITSCAP stand for? correct answers DoD Information Technology Security
Certification and Accreditation Process
What is CyberScope? correct answers A DHS lead initiative that modernized FISMA reporting to
CIO, Privacy Office , and OIG.
What OMB Circular established policy for management of Information resources? correct
answers A-130
The first piece of legislation from Congress to address computer security? correct answers
Computer Security Act of 1987
What legislation was passed in response to the Watergate scandal, covers PII and balances the
governments need to maintain information about individuals with the privacy rights of those
individuals ? correct answers Privacy Act of 1974
,What legislation was intended to reduce cracking of computer systems and to address Federal
computer related offenses? correct answers Computer Fraud and Abuse Act (CFAA) of 1986
What legislation was passed to expand and revise the federal wiretapping and electronic
eavesdropping provisions? correct answers Electronic Communications Privacy Act of 1986.
(ECPA)
What legislation assigned responsibilities of overseeing operational aspects of agency
information security policies and practices for information systems to the Secretary of Homeland
Security? correct answers Federal Information Security Management Act (FISMA) 2014
_________________________ outlines and clarifies the responsibilities of the OMB, the Cyber
Security Coordinator and DHS with respect to implementation of FISMA? correct answers
Memorandum M-108
Where is the US CERT - United States Computer Emergency Response Team a lined? correct
answers within DHS
What directive directs a "secure and reliable" common identification standard for verifying
employee identity and is the primary document for USG efforts for PIV cards and DOD CAC
usage? correct answers HSPD 12 (2004)
_________________ Is a method for using specific standards to enable automated vulnerability
management, measurement, and policy compliance evaluation of systems deployed in an
organization including eg., FISMA compliance correct answers SCAP - Security Content
Automation Protocol
________________ is an effort within individual executive departments and agencies to ensure
that Primary Mission Essential Functions (PMEFs) continue to be performed during a wide range
of emergencies, including localized acts of nature, accidents and technological or attack-related
emergencies. correct answers COOP - Continuity of Operations
, What document outlines how government and private sector participants in the critical
infrastructure community, work together to manage risks and achieve security and resilience
outcomes? correct answers NIPP - National Infrastructure Protection Plan
What does HSPD 7 cover? correct answers Critical Infrastructure Identification, Prioritization,
and Protection"
What are the 5 Basic Areas of NIST Cybersecurity Framework? correct answers 1) Identify,
2) Protect,
3) Detect,
4) Respond,
5) Recover
What agency receives FISMA Reports? correct answers DHS,
Agencies must send reports Monthly
What does RMF stand for? correct answers Risk Management Framework
What does DITPR stand for? correct answers Defense IT Portfolio Repository
What does NSS stand for? correct answers National Security Systems
What does ICD stand for? correct answers Intelligence Community Directive
What does C and A stand for? correct answers Certification and Accreditation