nerdexam
(ISC)2

CSSLP · Question #244

Which of the following DoD policies establishes policies and assigns responsibilities to achieve DoD IA through a defense-in-depth approach that integrates the capabilities of personnel, operations…

The correct answer is B. DoD 8500.1 Information Assurance (IA). DoD Directive 8500.1, titled 'Information Assurance (IA),' established the foundational policies and responsibilities for implementing a comprehensive defense-in-depth approach to information assurance across the Department of Defense.

Secure Software Concepts

Question

Which of the following DoD policies establishes policies and assigns responsibilities to achieve DoD IA through a defense-in-depth approach that integrates the capabilities of personnel, operations, and technology, and supports the evolution to network-centric warfare?

Options

  • ADoDI 5200.40
  • BDoD 8500.1 Information Assurance (IA)
  • CDoD 8510.1-M DITSCAP
  • DDoD 8500.2 Information Assurance Implementation

How the community answered

(39 responses)
  • B
    95% (37)
  • C
    3% (1)
  • D
    3% (1)

Why each option

DoD Directive 8500.1, titled 'Information Assurance (IA),' established the foundational policies and responsibilities for implementing a comprehensive defense-in-depth approach to information assurance across the Department of Defense.

ADoDI 5200.40

DoDI 5200.40 'DoD Information Technology (IT) Security Certification and Accreditation Process (DITSCAP)' was a specific instruction for C&A, not the broader IA policy.

BDoD 8500.1 Information Assurance (IA)Correct

DoD Directive 8500.1 (Information Assurance) was the overarching policy that defined the DoD's approach to IA, emphasizing defense-in-depth by integrating people, operations, and technology, and setting the stage for network-centric warfare concepts.

CDoD 8510.1-M DITSCAP

DoD 8510.1-M DITSCAP was a manual providing detailed procedures for the DITSCAP process, which is a component of IA but not the comprehensive policy itself.

DDoD 8500.2 Information Assurance Implementation

DoD 8500.2 'Information Assurance Implementation' was a supporting document to 8500.1, providing guidance for implementing IA controls, rather than the primary policy establishing the overall approach.

Concept tested: DoD Information Assurance foundational policy

Source: https://irp.fas.org/doddir/dod/d8500_1.pdf

Topics

#DoD Policies#Information Assurance (IA)#Defense-in-Depth#Network-Centric Warfare

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice