ISC2 Exam CAP Topic 9 Question 90 Discussion

Actual exam question for ISC2's CAP exam

Question #: 90
Topic #: 9

[All CAP Questions]

Which of the following statements correctly describes DIACAP residual risk?

AIt is the remaining risk to the information system after risk palliation has occurred.

BIt is a process of security authorization.

CIt is the technical implementation of the security design.

DIt is used to validate the information system.

Show Suggested Answer

Suggested Answer: A

by Carylon at Jul 07, 2024, 06:20 PM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bettina

4 months ago

Actually, residual risk is about the remaining risk, so A makes more sense.

upvoted 0 times

...

Mona

4 months ago

I'm not sure, but I think it might be C.

upvoted 0 times

...

Catalina

5 months ago

Haha, B and C are just plain wrong. Diacap is not a security authorization process or a technical implementation.

upvoted 0 times

Sophia

3 months ago

D) It is used to validate the information system.

upvoted 0 times

...

Becky

3 months ago

Yeah, A sounds right. It's the residual risk left over.

upvoted 0 times

...

Miles

4 months ago

A) It is the remaining risk to the information system after risk palliation has occurred.

upvoted 0 times

...

Magda

4 months ago

D) It is used to validate the information system.

upvoted 0 times

...

Rueben

4 months ago

Yeah, A sounds right. Residual risk is what's left after risk mitigation.

upvoted 0 times

...

Ashleigh

4 months ago

A) It is the remaining risk to the information system after risk palliation has occurred.

upvoted 0 times

...

Catrice

5 months ago

I agree with Gilma, residual risk is the remaining risk after palliation.

upvoted 0 times

...

Nana

5 months ago

I agree, A is the right choice. Diacap is all about managing residual risk to an acceptable level.

upvoted 0 times

Ayesha

5 months ago

I agree, DIACAP residual risk is all about managing risk after palliation.

upvoted 0 times

...

Tanja

5 months ago

I think A is the correct choice.

upvoted 0 times

...

Osvaldo

5 months ago

A) Definitely the correct answer. Residual risk is the remaining risk after all mitigation efforts have been applied.

upvoted 0 times

Julieta

4 months ago

D) I see, so it's about understanding and addressing any remaining vulnerabilities to protect the system.

upvoted 0 times

...

Corrina

5 months ago

C) Yes, that's right. It's important to assess and manage residual risk to ensure the security of the information system.

upvoted 0 times

...

India

5 months ago

B) So, residual risk is basically what's left over after we've done everything we can to reduce risk?

upvoted 0 times

...

Helga

5 months ago

A) Definitely the correct answer. Residual risk is the remaining risk after all mitigation efforts have been applied.

upvoted 0 times

...

Gilma

5 months ago

I think the correct answer is A.

upvoted 0 times

...