Federal IT Security Professional (FITSP) Operator Practice Test

These questions are part of the practice quiz. Start practicing

• In the RMF, which step focuses on establishing context and resources for risk management?
• Which area covers the governance and management of federal information security programs?
• Which publication is identified as the risk management framework document commonly referenced for federal IT security?
• HMAC is described as which type of function?
• Which program is described as the program for security assessment of cloud service providers?
• Which term is used to describe the expiry, revocation, or suspension of a digital certificate?
• Which term refers to malicious software disguised as legitimate to deceive users?
• SP 800-64 addresses which focus area?
• Which item is defined by x.509 standards?
• What subsystem is activated during specific operations?
• The terms 'Impact and likelihood' relate to which assessment factors?
• Which cryptographic approach uses asymmetric encryption for secure communications?
• Which Act established CIOs and Capital Planning Investment Control?
• Which standard defines security categorization based on impact levels for Confidentiality, Integrity, and Availability?
• The notation M-YY-## (e.g., M-14-03) is an example of which document formatting?
• What is a primary role of digital certificates in secure communications?
• FARM stands for which four phases?
• Which statement correctly describes symmetric encryption?
• Which publication provides minimum security requirements for federal information systems?
• Which term provides data integrity and authentication?
• Managing Security for Mobile Devices in Enterprises is covered by which SP?
• Which mechanism is used to provide ongoing risk assessments and status updates?
• Which publication provides governance guidance for managers on information security?
• Which SP standard defines media sanitization with stages such as clearing, purging, and destruction?
• Which term provides authentication or trust via x.509 standards?
• Which process comprises the steps Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor?
• Which focuses on log management and analysis?
• Which guideline addresses encryption for storage devices?
• Which trio is commonly identified in continuity planning?
• Which Act included FISMA to strengthen federal IT security?
• FARM is an acronym for Frame, Assess, Respond, Monitor. Which term describes this risk management framework?
• Which component deals with digital certificates and trust via CA, CRL, and key escrow?
• Which act enhances information sharing across sectors?
• What does HMAC stand for?
• Which SP aligns education and training for cybersecurity roles?
• The Interview, Examine, Test approach is a method used for what activity?
• OMB A-130 Security Plan pertains to which document?
• Guidelines for firewall management are described in which SP document?
• SP 800-113 includes which artifacts?
• OSI Layer 7 corresponds to which function?
• Self-propagating malicious code.
• Fully equipped disaster recovery sites are called what?
• Which metrics are used to define business continuity tolerances?
• The item CA, Certificate Revocation List, Key Escrow corresponds to which component?
• Which standard updates cryptographic module standards to meet security requirements, including cloud considerations?
• Which approach uses a public and private key pair to enable secure communications?
• Which program is specifically designed to standardize cloud security for government?
• FIPS 181 standards are associated with which security practice?
• The Information Security Handbook for Managers is primarily intended for which audience?
• Analyze security alerts in real-time is a capability provided by which tools?
• OMB Circular vs Memorandum addresses contingency strategies for IT systems.
• Which SP provides guidelines specifically for National Security Systems?
• Which baseline concept is defined by FIPS 200?
• What are the impact levels defined by FIPS 199?
• Which function sets IT policy and reporting schedules?
• Which standard is used to certify cloud security for government workloads?
• Which SP would be the primary reference for contingency planning for federal IT systems?
• Which act focuses on expanding electronic government initiatives in the United States?
• IT Security Engineering Principles are described in which publication?
• Which term describes the use of certificates issued by a trusted authority to verify identities?
• PIV cards for federal employees are defined by which standard?
• Which publication is associated with control families used to structure security controls?
• Contingency Planning for Federal IT Systems is described in which SP?
• Real-time event monitoring and security management are provided by which type of tools?
• Which publication addresses media sanitization methods including clearing, purging, and destruction?
• Which framework focuses on contingency planning?
• Which approach combines common and system-specific controls?
• Which metrics set commonly includes MFA, encryption, and incident response rates?
• Which document focuses on digital identity guidelines for federal IT?
• Security in Public Cloud Computing is described in which SP?
• What is the Common Identification Standard for Federal Employees?
• Which standard covers cryptographic module standards?
• Which steps comprise detecting, responding, recovering, and preventing incidents?
• Which Act requires protection of PII and requires a valid reason for collection and retention?
• Which item lists Certificate Revocation List and Key Escrow?
• EAL Levels (FIPS) map to which national objective?
• FIPS 200 outlines what?
• Which term is associated with preventing denial of involvement in a transaction?
• Which statement correctly describes IDS vs IPS?
• In RMF, what is the Security Assessment Report (SAR) used for?
• FIPS 198-1 is associated with which guidelines?
• Which statement best describes symmetric encryption?
• Which algorithms are listed as encryption algorithms in the material?
• PKI Authentication is best described as which concept?
• Which principle states that users should only access what they need for their role?
• Which term refers to a formal set of measurements and oversight for information security in federal programs?
• Which component includes CA, CRL, and Key Escrow?
• Hybrid Encryption involves which lifecycle activities?
• Which term refers to converting plaintext into ciphertext for confidentiality?
• Which act established the role of the CIO and CPIC processes in federal IT management?
• Which type of threat is commonly detected using HIDS or behavior-based systems?
• Which term describes malware designed to hide its presence and actions on a system?
• AES is an example of which type of encryption?
• The item that encompasses access control, encryption, and auditing is categorized under which control type?
• Which publication would you use to automate the validation of security configurations across systems?
• SP 800-78 addresses Major Applications and General Support Systems (GSS). Which document corresponds?
• Which term focuses on cybersecurity education and workforce development?
• Which standard provides a common identification credential for federal employees and contractors?
• What term describes proactively eliminating risk by avoiding related activities?
• NIST SP 800-53A defines adequate security and reporting requirements. Which document defines these requirements?
• Which standard is known for digital identity guidelines covering identity proofing and authentication?
• Which publication addresses IT Security Engineering Principles?
• Which publication addresses disposal methods for media, including clearing and purging?
• Expanded electronic government initiatives are associated with which act?
• OMB A-130 defines categories for information systems. Which domain is described by these categories?
• Which of the following is listed among government encryption standards?
• Security policies and A&A processes belong to which control family?
• Which document focuses on National Continuity of Operations?
• Malicious software providing unauthorized administrative access.
• Which publication provides methods for assessing the effectiveness of security controls?
• Which two system types are named in the OMB Circular A-130 Categories?
• Which SP is associated with the RMF Authorization Roles in describing the roles involved in authorization?
• Which standard includes basic to advanced cryptographic protections?
• In the RMF, which step occurs last to ensure continuous monitoring?
• Which framework is designed to address cybersecurity workforce knowledge, skills, and tasks?
• Which topic deals with securing network traffic across sites using IPsec?
• Which RMF artifact includes Systems Security Plan, Security Assessment Report, and Plan of Actions and Milestones?
• SP 800-88 provides guidance on which topic?
• Which Act assigned NIST to develop IT security standards?
• Which publication covers remote access security guidelines?
• Techniques for clearing, purging, and destroying data are called what?
• Which publication is associated with Management, Technical, and Operational controls?
• Recovery Point Objective refers to the acceptable data loss in case of an incident.
• FISMA reporting requires which type of reports?
• SP 800-34 Planning is recommended in SP 800-92.
• Which term describes the maximum tolerable data loss in an incident?
• What is the primary purpose of Digital Certificates?
• Malicious software disguised as legitimate.
• HSPD-20 provides Configuration Management Guidelines. Which term best describes these guidelines?
• Which type of encryption is typically used for bulk data due to its speed?
• Which resource enables automated checks against known vulnerabilities?
• Which concept outlines steps to detect, respond, recover, and prevent incidents?
• Which term describes the possibility that a digital certificate may expire, be revoked, or be suspended?
• Which technology uses IPsec to provide secure communications?
• Which term is the Keyed Hash Message Authentication Code designed for data integrity?
• Which item is tied to Risk Assessment Factors?
• Which control uses application-layer techniques to inspect traffic for threats?
• Which term is primarily used to manage public-key encryption and trust in a PKI?
• Cloud security and privacy guidelines are updated in which standard?
• Which SP would you reference for guidance on security in public cloud environments?
• PKC stands for which cryptographic concept?
• Which term ensures encryption and integrity for IP packets?
• Which standard defines the Advanced Encryption Standard (AES)?
• Which practice focuses on protecting storage by managing encryption keys?
• SP 800-128 addresses Cryptographic Algorithms for the PIV card. Which credential is implicated?
• Which of the following is a primary advantage of public key cryptography?
• Which document provides a catalog of security and privacy controls for federal information systems?
• Which document defines the minimum security controls baseline for federal information systems?
• Which area is described as combining symmetric and asymmetric cryptographic techniques?
• Which publication is the Guide to Storage Encryption associated with?
• Which NIST Special Publication defines the National Checklist Program for security configurations?
• What are the core functions of the NIST Cybersecurity Framework?
• What mechanism uses a sender's private key to ensure non-repudiation and integrity of a message?
• In the CSF, which two core functions address monitoring and handling incidents after detection?
• What does FARM stand for in risk management?
• Which framework emphasizes policies and schedules to ensure compliance?
• Which act focuses on strengthening public health and medical preparedness in the United States?
• What is the term for the process of managing cryptographic keys?
• FIPS 199 defines the security categorization of information systems.
• In RMF, which element is associated with assessing ongoing system security?
• What term describes a low-cost disaster recovery site with no pre-installed equipment?
• NIST FIPS documents typically provide guidance that is which type?
• RMF Authorization Roles include which three roles?
• NVD stands for what?
• Which disaster recovery option is fully equipped and ready to take over operations quickly?
• Malicious code that attaches to a host file.
• SP 800-94 concentrates on which area?
• Which publication provides guidelines for identifying National Security Systems?
• Media Disposal involves which type of assessment?
• SP 800-53 Families provide guidelines for which area?
• Which are common encryption key types?
• Which term is the standard that defines the AES algorithm?
• Which term represents short-term federal IT policies and guidelines?
• Used in disaster recovery; low-cost, slow to restore.
• Which document includes SSP, SAR, POA&M?
• Asset identification and boundary establishment are components of which overarching concept in the FARM framework?
• Continuous Monitoring (ISCM) is described in which SP?
• What is the primary purpose of a Business Impact Analysis (BIA)?
• Which document provides guidelines for firewall management?
• Which trio constitutes the CIA Triad?
• IDS detects intrusions; IPS prevents intrusions. Which term best describes this comparison?
• RPO stands for which?
• SP 800-144 is associated with which concept?
• Which concept includes system-specific, hybrid, and common controls?
• The concept described as combining common and system-specific controls is called what?
• Which statement correctly distinguishes symmetric and asymmetric encryption?
• Which process includes planning to assess, respond to, and recover from incidents?
• Inspects and filters traffic at the application layer.
• Which algorithm is a classic example of asymmetric encryption?
• SP 800-53A Methods relate to which topic?
• SP 800-53A focuses on which assessment type?
• Which SP publication provides guidance for protecting the confidentiality of Personally Identifiable Information?
• Which standard is associated with Developing System Security Plans?
• Real-time logging and correlation of security events are primarily provided by which category of tools?
• RTO stands for which?
• Which risk management strategy involves avoiding activities that may introduce risk?
• Which VPN types are described as Client-to-Site, Site-to-Site, and Clientless (SSL VPN)?
• SP 800-128 discusses Cryptographic Algorithms for PIV. Which credential is the focus?
• Which property best describes asymmetric encryption?
• Major Application, General Support System is categorized under which document?
• Which category includes Packet Filtering, Stateful, and Application Firewalls?
• Which system detects intrusions but does not automatically block them?
• Which RMF activity is described as the ongoing security assessment program, often aligned with cloud considerations?
• Which policy is associated with establishing a Patch Management Program?
• Which VPN mode encrypts the entire packet including the header?
• Which publication provides Guidelines for Configuration Management?
• Which NIST CSF core function focuses on understanding the business context, assets, and risk?
• SP 800-27 Principles includes which areas?
• Which RMF activity focuses on maintaining system security after authorization?
• Which database tracks public vulnerabilities?
• Which publication is the Technical Guide to Security Testing?
• In the material, HSPD-8 is linked to which database?
• Which IPSec component provides data integrity and authentication without encrypting payload?
• OMB A-130 Policy Scope is described as ensuring trust using what?
• Which type of malware self-replicates to spread across networks?
• Real-time risk assessments and updates are provided by what?
• Using HIDS or behavioral-based detection for suspicious activity.
• Federal Enterprise Architecture (FEA) is best described as what?
• Secure system engineering best practices are described in which publication?
• To obtain guidance on security for mobile devices in enterprise environments, which SP should be consulted?
• Which standard addresses clearing, purging, and destroying media?
• Which NIST Special Publication provides guidelines for securing email systems?
• Which concept provides consistency in vulnerability checks?
• SP 800-51 is described as the Vulnerability Naming Guide.
• RMF Prepare Step Activities describe methods to assess which of the following?
• Physical security and environmental controls are part of which control family?
• Which document defines the overall risk management framework (FARM - Frame, Assess, Respond, Monitor)?
• Which metrics explain RTO, RPO, and MTD?
• Which focus area addresses national preparedness and risk reduction?
• Which term corresponds to the standard that defines AES?
• Which principle reduces the risk of fraud or error?
• Which group is responsible for setting IT policy and reporting schedules?
• Which RMF element includes the artifacts used during the authorization decision process?
• What term describes ignoring or dismissing the existence of a risk?
• SP 800-51 is best described as the Vulnerability Naming Guide.
• Which tools enable automated security checks?
• Which SP addresses encryption for storage devices?
• SP 800-40 focuses on which topic?
• Which concept represents the ongoing process of identifying, assessing, and managing risk throughout the system lifecycle?
• Which term describes the framework for managing public-key encryption?
• FIPS 140-3 updates address which area?
• A digital signature provides which combination of properties?
• Which term refers to a high-cost disaster recovery site with pre-installed equipment for rapid recovery?
• Which term describes the minimum security requirements for federal information systems?
• Encryption Standards (Government) include which algorithms?
• Which NIST SP publication provides testing methods for security controls?
• Which term is paired with 'Real-time assessment of security'?
• Which RMF concept is associated with using FIPS 199 to categorize information systems?
• Which concept is described by the phases Detect, Respond, Recover, and Prevent in the security lifecycle?
• Which technology ensures integrity and authenticity in communications?
• The Update to Cryptographic Module Standards corresponds to which standard?
• Which tool category is designed to analyze security incidents in real-time?
• What term describes the maximum system downtime tolerable?
• What do Layer 7 firewalls inspect?
• Which malware type masquerades as legitimate software to trick users?
• FIPS 199 impact levels are used in which RMF step?
• Which document provides guidance on incident handling lifecycles?
• Which SP provides guidance specifically for risk assessments within the RMF?
• Access control, encryption, auditing are part of which control category?
• SP 800-34 Planning is recommended by SP 800-92.
• What is the purpose of continuous monitoring in RMF?
• Which term is a keyed hash function used to authenticate messages?
• RSA is an example of which type of encryption?
• Which layers are listed as BIA components?
• Hybrid encryption combines what to achieve security and efficiency?
• In RMF Step 1, which artifacts are typically updated?
• SP 800-63 encourages agencies to use architecture frameworks?
• What is the stated purpose of the NICE Framework?
• Continuous Monitoring is best described as which activity?
• Which risk management approach eliminates risk by avoiding the activity?
• SP 800-63 provides guidelines for which domain?
• FIPS 201 standard is associated with which identity framework?
• Which component includes likelihood and impact of a threat?
• Which standard is associated with Personal Identity Verification for federal employees?
• Security Content Automation Protocol is commonly referred to by which acronym?
• Security Log Management is defined by which publication?
• Which standard is linked to PIV credentials for federal employees?
• Which policy governs the management of federal information resources, including security and privacy guidelines?
• Which concept ensures accountability and integrity in communication?
• Which activity is aimed at ensuring continuity of operations after a security incident?
• Which OSI layer is associated with packet filtering in the context provided?
• Which act requires federal agencies to establish a security program with annual reporting?
• Which area is primarily concerned with safeguarding cryptographic keys?
• Which three categories are used to classify management, technical, and operational controls?
• Which SP publication addresses clearing, purging, and destroying media?
• HSPD-7 is associated with which guide?
• Which schedule covers annual and quarterly reports to the OMB?
• Which item corresponds to the management control family?
• Which attribute of the CIA Triad ensures information is available to authorized users when needed?
• SP 800-78 covers Major Applications and General Support Systems (GSS). Which document is this?
• Which term is used to detect changes to data integrity?
• SP 800-34 is linked with which topic?
• Which entity is responsible for managing and validating shared controls?