stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
RMF Flashcards | StudBud
Explore
/
RMF
RMF
43 terms
·
StudBud Administration
·
5 plays
Imported from external platform
Flashcards
43 cards
F
Practice quiz
P
Host live
L
Questions
43
Answers
1
Within his or her boundary, the AO makes the decision
False
True
2
In this phase uses security overlays to better align with the demands of particular or use cases
Authorize
Categorize
Implement
Select
Monitor
Assess
3
A denail of authorization
IATT
ATO
DATO
ATO-C
4
This step identifies the systems and rates CIA as
low
,
MODERATE,
or
high
Control
Categorize
Assess
Implement
Select
Monitor
5
Controls be brought to compliance within one year
ATO
DATO
IATT
ATO-C
6
Post authorization this becomes the focus
Categorize
Select
Monitor
Implement
Authorize
Assess
7
In this phase each control has three possible responses: C, NC, N/A from the
ISSM
Select
Control
Monitor
Implement
Assess
Categorize
8
This phase can be done manually using NIST SP 800-53
Control
Monitor
Select
Categorize
Assess
Implement
9
Beyond one year this requires concurrence of the DoD Component CIO
ATO
ATO-C
IATT
DATO
10
Which of these are common security overlay controls
Space Platform
Cross Domain
Cyber
Intelligence
Classified system
Privacy
11
In this phase CCI descriptions are read closely and
address exactly what is needed
Assess
Categorize
Select
Implement
Authorize
Monitor
12
In this step the RMF package is submitted to the AO
Authorize
Monitor
Implement
Categorize
Select
Assess
13
Which control response requires a narrative response and evidence such as screen shots
Compliant
Non-compliant
Not Applicable
14
A SAR is the final product of this phase
Categorize
Select
Assess
Implement
Authorize
Monitor
15
A variant of the RMF process for Platform IT (PIT)
Type
Assess-Only
16
Who receives the Security Assessment Report (SAR)
ISSM
AO
SCA
ISSO
17
Interim authority is given to test the system with real-world data
ATO
IATT
DATO
ATO-C
18
Who is part of Information assurance
AO
ISSO
SCA
AODR
19
Who sponsors a program or system
ISSO
SCA
ISSM
ISO
20
Select the First step in the RMF process
Select
Monitor
Implement
Categorize
Authorize
Assess
21
How many steps are in the RMF process?
4
12
5
6
22
What are the basic functions of RMF
accept risk on behalf of the entire DODIN
Decide to use or not use the system based on its assessed risk
Assess the risk associated with the system
Identify an information system;
23
The RMF exists to ensure cybersecurity
False
True
24
The RMF is a cybersecurity framework
True
False
25
What is the third step in the RMF process
Monitor
Select
Control
Implement
Categorize
Assess
26
Who is considered leadership
ISSO
SCA
AO
AODR
27
Step 2 in the RMF process
Implement
Monitor
Control
Select
Assess
Categorize
28
CONOPS help guide this phase
Assess
Monitor
Implement
Select
Categorize
Authorize
29
In this step the
system remains unauthorized
until the AO issues and ATO
Implement
Categorize
Assess
Select
Monitor
Authorize
30
The process of making the risk decision in RMF is known as
ATO
AO
A&A
AODR
31
Geographic AOs may accept risk on behalf of the entire DODIN
False
True
32
Who manages programs
SCA
SA
PM
ISSM
33
This is for systems that are approved only when built identically
Type
Assess-Only
34
Which control response requires a POA&M
Compliant
Non-compliant
Not Applicable
35
The decision made in the RMF process in known as
ATO
AO
AODR
A&A
36
The system is temporarily authorized
IATT
ATO
DATO
ATO-C
37
Who works for the PM
ISSO
AO
AODR
SCA
38
DoD mandates the use of eMASS
True
False
39
Which control response requires a risk assessment
Non-compliant
Compliant
Not Applicable
40
A complete RMF package includes
Security Assessment Report
concurrence from the DOD
System Security Plan
POA&M(s)
41
Typically does not to exceed 90 days
DATO
IATT
ATO-C
ATO
42
Who Accepts or rejects residual risk to use a system
ISSO
ISSM
SCA
AO
43
Who provides recommendations as to whether the system should be given an ATO
SCA
PM
SA
ISSM
