nerdexam
(ISC)2

CAP · Question #270

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among…

The correct answer is A. VI Vulnerability and Incident Management B. DC Security Design & Configuration C. EC Enclave and Computing Environment. DoD Instruction 8500.2 defines eight IA areas including Vulnerability and Incident Management (VI), Security Design and Configuration (DC), and Enclave and Computing Environment (EC).

Security and Privacy Governance, Risk Management, and Compliance Program

Question

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AVI Vulnerability and Incident Management
  • BDC Security Design & Configuration
  • CEC Enclave and Computing Environment
  • DInformation systems acquisition, development, and maintenance

How the community answered

(40 responses)
  • A
    95% (38)
  • D
    5% (2)

Why each option

DoD Instruction 8500.2 defines eight IA areas including Vulnerability and Incident Management (VI), Security Design and Configuration (DC), and Enclave and Computing Environment (EC).

AVI Vulnerability and Incident ManagementCorrect

VI (Vulnerability and Incident Management) is one of the eight DoD IA control areas, covering processes for identifying, reporting, and responding to vulnerabilities and security incidents.

BDC Security Design & ConfigurationCorrect

DC (Security Design and Configuration) is one of the eight DoD IA control areas, addressing secure architecture, configuration baselines, and change management.

CEC Enclave and Computing EnvironmentCorrect

EC (Enclave and Computing Environment) is one of the eight DoD IA control areas, covering protections applied to computing devices and the enclave boundary.

DInformation systems acquisition, development, and maintenance

Information systems acquisition, development, and maintenance is a control domain from ISO 27001 and NIST frameworks, not one of the eight specific IA areas defined in DoD Instruction 8500.2.

Concept tested: DoD Instruction 8500.2 eight IA control areas

Source: https://public.cyber.mil/policy-guidance/

Topics

#DoD Instruction 8500.2#Information Assurance areas#Security controls#DoD compliance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAP Practice