Which of the following DoD policies provides assistance on how to implement policy, assign responsibilities, and prescribe procedures for applying integrated, layered protection of the DoD information

Question

Options

• ADoD 8500.1 Information Assurance (IA)
• BDoDI 5200.40
• CDoD 8510.1-M DITSCAP
• DDoD 8500.2 Information Assurance Implementation

• B
  4% (1)
• C
  4% (1)
• D
  92% (24)

Explanation

DoD 8500.2 Information Assurance Implementation is correct because its title itself signals its purpose - "Implementation" - meaning it operationalizes IA policy by assigning responsibilities, prescribing procedures, and layering protections for DoD information systems and networks. It is the how-to companion to 8500.1.

Why the distractors are wrong:

• A (DoD 8500.1) establishes the overarching IA policy and framework but does not prescribe implementation procedures - that's 8500.2's job.
• B (DoDI 5200.40) covers the DITSCAP (DoD IT Security Certification and Accreditation Process) authorization framework, a separate but related process.
• C (DoD 8510.1-M DITSCAP) is the manual detailing the certification and accreditation process specifically, not the layered protection implementation guidance.

Memory tip: Think of it as a 1-2 punch - 8500.1 = Policy (what to do), 8500.2 = Implementation (how to do it). The word "Implementation" in the title is your direct giveaway on the exam.

No community discussion yet for this question.