CGRC (CGRC) - ISC2 Exam Questions
Last updated on July 07, 2026
A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies? Each correct answer represents a complete solution. Choose all that apply. Response:
Systematic
Informative
Regulatory
Advisory
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which of the following formulas was developed by FIPS 199 for categorization of an information type? Response:
SC information type = {(confidentiality, controls), (integrity, controls), (authentication, controls)}
SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}
SC information type = {(confidentiality, risk), (integrity, risk), (availability, risk)}
SC information type = {(Authentication, impact), (integrity, impact), (availability, impact)}
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
The property of being genuine and being able to be verified and trusted; confidence in the validity of a transmission, a message, or message originator. Response:
Authenticity
Validity
Complexity
Responsibility
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Overlays can be implemented as part of control tailoring after the completion of what process? Response:
Risk Assessment
Security categorization
Privacy Impact Assessment (PIA)
Contingency Plan (CP)
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply. Response:
Develop DIACAP strategy.
Assign IA controls.
Assemble DIACAP team.
Initiate IA implementation plan.
Register system with DoD Component IA Program.
Conduct validation activity.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.