ISC2 Certified Authorization Professional (CAP)

Question 1

What is the primary goal of an Information Security Continuous Monitoring (ISCM) program?

To replace the need for ATOs entirely To maintain ongoing awareness of information security, vulnerabilities, and threats To automate all security control implementation To reduce the number of security staff required

Correct Answer:

To maintain ongoing awareness of information security, vulnerabilities, and threats

Question 2

NIST SP 800-137 provides guidance on which topic?

Security categorization Incident response Information Security Continuous Monitoring (ISCM) for federal systems Penetration testing methodology

Correct Answer:

Information Security Continuous Monitoring (ISCM) for federal systems

Question 3

In the context of continuous monitoring, what is a 'security metric'?

A financial cost associated with a security breach A quantifiable measure used to assess the effectiveness of security controls over time A vulnerability severity score A user access log entry

Correct Answer:

A quantifiable measure used to assess the effectiveness of security controls over time

Question 4

How does continuous monitoring support the RMF Monitor step?

It replaces the need for security assessments It provides ongoing data to ensure controls remain effective and risks are within acceptable levels It automatically grants ATOs without human review It eliminates the need for a POA&M

Correct Answer:

It provides ongoing data to ensure controls remain effective and risks are within acceptable levels

Question 5

Which tool is commonly used in US federal agencies to automate continuous monitoring data collection?

FedRAMP Portal Continuous Diagnostics and Mitigation (CDM) Dashboard NIST Cybersecurity Framework Tool OMB MAX Portal

Correct Answer:

Continuous Diagnostics and Mitigation (CDM) Dashboard

Question 1

Exam overview

About this Exam

Prepare with the ISC2 Certified Authorization Professional (CAP) practice quiz. This question bank includes 30 questions covering federal, security, monitoring, continuous, and information. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

ISC2 Certified Authorization Professional (CAP)

This practice set contains 30 questions from the matching question bank and focuses on federal, security, monitoring, continuous, and information. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Keep studying

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

ISC2 Certified Authorization Professional (CAP)

Frequently Asked Questions

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

Arizona CNA Certified Nursing Assistant Practice Exam

Certified Professional Public Buyer (CPPB) Practice Exam

Certified Specialist Business Intelligence (CSBI) Practice Test

Certified Specialist In Renal Nutrition (CSR) Practice Exam

Certified Specialist Physician Practice Management (CSPPM) Practice Exam