According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among th

Question

Options

• ADC Security Design & Configuration
• BEC Enclave and Computing Environment
• CVI Vulnerability and Incident Management
• DInformation systems acquisition, development, and maintenance

• A
  83% (38)
• D
  17% (8)

Explanation

DoD Instruction 8500.2 defines eight IA areas, each identified by a two-letter prefix code: DC (Security Design & Configuration), EC (Enclave and Computing Environment), EB (Enclave Boundary Defense), PE (Physical and Environmental), PR (Personnel), VI (Vulnerability and Incident Management), CO (Continuity), and IA (Identification and Authentication). Options A, B, and C match three of these eight official areas exactly, including their correct prefixes, confirming they are valid DoD 8500.2 IA areas.

Option D is incorrect because "Information systems acquisition, development, and maintenance" is a control domain from ISO/IEC 27001/27002, not from DoD 8500.2 - it's a common distractor designed to test whether you can distinguish between frameworks.

Memory tip: Remember the DoD 8500.2 areas by their two-letter codes using the mnemonic "DC EC EB PE PR VI CO IA" - all eight areas use abbreviated codes, so any answer phrased as a full descriptive sentence (like option D) should immediately raise a red flag as belonging to a different framework.

No community discussion yet for this question.