nerdexam
(ISC)2

CGRC · Question #69

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among…

The correct answer is A. VI Vulnerability and Incident Management B. DC Security Design & Configuration C. EC Enclave and Computing Environment. DoD Instruction 8500.2 defines specific Information Assurance (IA) areas, and Vulnerability and Incident Management (VI), Security Design & Configuration (DC), and Enclave and Computing Environment (EC) are among these commonly referenced areas.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply. Response:

Options

  • AVI Vulnerability and Incident Management
  • BDC Security Design & Configuration
  • CEC Enclave and Computing Environment
  • DInformation systems acquisition, development, and maintenance

How the community answered

(62 responses)
  • A
    94% (58)
  • D
    6% (4)

Why each option

DoD Instruction 8500.2 defines specific Information Assurance (IA) areas, and Vulnerability and Incident Management (VI), Security Design & Configuration (DC), and Enclave and Computing Environment (EC) are among these commonly referenced areas.

AVI Vulnerability and Incident ManagementCorrect

Vulnerability and Incident Management (VI) is recognized as an Information Assurance (IA) area in some interpretations and training materials derived from DoD Instruction 8500.2, focusing on identifying, analyzing, and mitigating system vulnerabilities and responding to security incidents.

BDC Security Design & ConfigurationCorrect

Security Design & Configuration (DC) is another IA area, encompassing the secure architectural design and proper configuration of information systems to protect data and resources, as often taught in relation to DoD 8500.2.

CEC Enclave and Computing EnvironmentCorrect

Enclave and Computing Environment (EC) is also recognized as an IA area in common educational contexts for DoD 8500.2, dealing with the security of the computing infrastructure and logical boundaries that protect information systems.

DInformation systems acquisition, development, and maintenance

While 'Information systems acquisition, development, and maintenance' are crucial activities requiring security considerations, this specific phrase is not one of the designated two-letter acronym IA areas or functional areas as explicitly enumerated in common lists associated with DoD Instruction 8500.2.

Concept tested: DoD Information Assurance (IA) areas (per 8500.2)

Topics

#DoD Instruction#Information Assurance#IA Areas#Compliance

Community Discussion

No community discussion yet for this question.

Full CGRC Practice