CGRC (CGRC) - ISC2 Exam Questions
Last updated on July 07, 2026
Change management is initiated under which phase? Response:
Select security controls
Categorize information system
Authorize information system
Monitor security controls
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
What is the process of determining the security category for information or an information system per methodologies described in CNSS instruction 1253 for national security systems and in FIPS 199 for other than national security systems? Response:
Information Type
Categorization
Security Categorization
Impact Level
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
In which of the following phases does the SSAA maintenance take place? Response:
Phase 3
Phase 2
Phase 1
Phase 4
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won't affect your project much if they happen. What should you do with these identified risk events? Response:
These risks can be accepted
These risks can be added to a low priority risk watch list
All risks must have a valid, documented risk response
These risks can be dismissed
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Why would the authorization decision issue a determination of Not Authorized? Response:
If the system is not authorized (NA) to process classified information.
If it is deemed that the agency level risk is unacceptably high.
If the system is mission critical and requires an interim authority to operate.
The information system is always accredited without any restrictions or limitations on its operation.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.