GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

SFPC - Risk Management Framework Guide Questions

Rich b 10 questions Updated 30 Sep 2025

Take the quiz

This quiz has question types that open in the usual player.

Questions in this quiz (10)

  1. 1What Policy governs Cybersecurity?
    1. ANIST SP 800-37
    2. BCNSSI 1253
    3. CDODI 8500.01
    4. DDODI 8510.01
  2. 2DOD participates in [blank_start]CNSS[blank_end] and [blank_start]NIST[blank_end] as a vested stakeholder to create a more standardized approach to Cybersecurity.
    1. ACNSS
    2. BPlatform
    3. CTIER 1
    4. DRMF
    5. ENIST
    6. FOrganization
    7. GTIER 3
    8. HNISPOM
  3. 3What factor(s) do organizations need to take into account when implementing a holistic approach to organizational risk management?
    1. ASupporting Information Systems
    2. BRelationships between mission/business process
    3. CStrategic Goals and Objectives
    4. DAll of the above
  4. 4PIT Systems refer to:
    1. AProcess Information Technology
    2. BPlatform Information Technology
    3. CProprietary Information Technology
    4. DPriority Information Technology
  5. 5What broad groups does DOD use to categorize
    information technology?
    1. AIT Products
    2. BIT Services
    3. CPIT
    4. DInformation Systems
  6. 6What is the last step in the RMF Process?
    1. AAssess Step
    2. BCategorize Step
    3. CMonitor Step
    4. DPrepare Step
  7. 7To which step do the following tasks belong: Information Types, System Registration, Asset Identification, and System Stakeholders.
    1. APrepare Step
    2. BImplement Step
    3. CAuthorize Step
    4. DAssess Step
  8. 8In what Step is the system disposal strategy developed and implemented as needed?
    1. AImplement Step
    2. BMonitor Step
    3. CPrepare Step
    4. DAssess Step
  9. 9[blank_start]Tier 1[blank_end]: addresses risk management at the DOD enterprise level. The key governance elements in Tier 1 include: DOD SISO, Risk Executive Function, DOD Cybersecurity Architecture, the RMF TAG, and the KS.

    [blank_start]Tier 2[blank_end]: Mission and Business Processes levels. The key governance elements include the PAO, DOD CIO, and the SISO.

    [blank_start]Tier 3[blank_end]: Information and PIT Systems consisting of an Authorizing Official and the IS or PIT system cybersecurity program.
    1. ATier 1
    2. BTier 2
    3. CTier 3
    4. DTier 2
    5. ETier 1
    6. FTier 3
    7. GTier 3
    8. HTier 2
    9. ITier 1
  10. 10Choose the correct task for the corresponding RMF Prepare step at the organization level.

    [blank_start]Task P-4[blank_end]: Organizationally-Tailored Control Baselines and Cybersecurity Framework Profiles - Organizationally-tailored control baselines and/or Cybersecurity Framework Profiles are established and made available.

    [blank_start]Task P-1[blank_end]: Risk Management Roles - Individuals are identified and assigned key roles for executing the RMF.

    [blank_start]Task P-7[blank_end]: Continuous Monitoring Strategy – Organization - An organization-wide strategy for monitoring control effectiveness is developed and implemented.

    [blank_start]Task P-3[blank_end]: Risk Assessment – Organization - An organization-wide risk assessment is completed, or an existing risk assessment is updated.

    [blank_start]Task P-6[blank_end]: Impact-Level Prioritization - A prioritization of organizational systems with the same impact level is conducted.

    [blank_start]Task P-2[blank_end]: Risk Management Strategy - A risk management strategy for the organization that includes a determination and expression of organizational risk tolerance is established.

    [blank_start]Task P-5[blank_end]: Common Control Identification - Common controls that are available for inheritance by organizational systems are identified, documented, and published.
    1. ATask P-4
    2. BTask P-1
    3. CTask P-2
    4. DTask P-3
    5. ETask P-5
    6. FTask P-6
    7. GTask P-7
    8. HTask P-1
    9. ITask P-2
    10. JTask P-3
    11. KTask P-4
    12. LTask P-5
    13. MTask P-6
    14. NTask P-7
    15. OTask P-7
    16. PTask P-1
    17. QTask P-2
    18. RTask P-3
    19. STask P-4
    20. TTask P-5
    21. UTask P-6
    22. VTask P-3
    23. WTask P-1
    24. XTask P-2
    25. YTask P-4
    26. ZTask P-5
    27. AATask P-6
    28. ABTask P-7
    29. ACTask P-6
    30. ADTask P-1
    31. AETask P-2
    32. AFTask P-3
    33. AGTask P-4
    34. AHTask P-5
    35. AITask P-7
    36. AJTask P-2
    37. AKTask P-1
    38. ALTask P-3
    39. AMTask P-4
    40. ANTask P-5
    41. AOTask P-6
    42. APTask P-7
    43. AQTask P-5
    44. ARTask P-1
    45. ASTask P-2
    46. ATTask P-3
    47. AUTask P-4
    48. AVTask P-6
    49. AWTask P-7

Information

Description
SFPC Security Quiz on SFPC - Risk Management Framework Guide Questions, created by Rich b on 30/09/2025.
Author
Rich b
Language
English
Views
9
History
Created on 30 Sep 2025 · updated on 30 Sep 2025
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?