nerdexam
(ISC)2

CAP · Question #79

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among…

The correct answer is A. DC Security Design & Configuration B. VI Vulnerability and Incident Management C. EC Enclave and Computing Environment. DoD Instruction 8500.2 defines eight Information Assurance (IA) control areas, each identified by a two-letter prefix: DC (Security Design & Configuration), VI (Vulnerability and Incident Management), EC (Enclave and Computing Environment), EB (Enclave Boundary Defense), PE…

Selection and Approval of Framework, Security, and Privacy Controls

Question

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ADC Security Design & Configuration
  • BVI Vulnerability and Incident Management
  • CEC Enclave and Computing Environment
  • DInformation systems acquisition, development, and maintenance

How the community answered

(51 responses)
  • A
    92% (47)
  • D
    8% (4)

Explanation

DoD Instruction 8500.2 defines eight Information Assurance (IA) control areas, each identified by a two-letter prefix: DC (Security Design & Configuration), VI (Vulnerability and Incident Management), EC (Enclave and Computing Environment), EB (Enclave Boundary Defense), PE (Physical and Environmental), PR (Personnel), CO (Continuity), and IA (Identification and Authentication). Options A (DC), B (VI), and C (EC) are all legitimate IA control areas under DoDI 8500.2. Option D - 'Information systems acquisition, development, and maintenance' - is a control domain from ISO/IEC 27001, not from DoDI 8500.2.

Topics

#DoD 8500.2#Information Assurance Areas#Security Controls#Government Frameworks

Community Discussion

No community discussion yet for this question.

Full CAP Practice