100% Pass Guarantee with ISC CAP Dumps!

Walter is the project manager of a large construction project. He'll be working with several vendors on the project. Vendors will be providing materials and labor for several parts of the project. Some of the works in the project are very dangerous so Walter has implemented safety requirements for all of the vendors and his own project team. Stakeholders for the project have added new requirements, which have caused new risks in the project. A vendor has identified a new risk that could affect the project if it comes into fruition. Walter agrees with the vendor and has updated the risk register and created potential risk responses to mitigate the risk. What should Walter also update in this scenario considering the risk event?

A. Project management plan

B. Project contractual relationship with the vendor

C. Project communications plan

D. Project scope statement

David is the project manager of HGF project for his company. David, the project team, and several key stakeholders have completed risk identification and are ready to move into qualitative risk analysis. Tracy, a project team member, does not understand why they need to complete qualitative risk analysis. Which one of the following is the best explanation for completing qualitative risk analysis?

A. It isa rapid and cost-effective means of establishing priorities for the plan risk responses and lays the foundation for quantitative analysis.

B. It is a cost-effective means of establishing probability and impact for the project risks.

C. Qualitative risk analysis helps segment the project risks, create a risk breakdown structure, and create fast and accurate risk responses.

D. All risks must pass through quantitative risk analysis before qualitative risk analysis.

Which of the following formulas was developed by FIPS 199 for categorization of an information system?

A. SCinformation system = {(confidentiality, impact), (integrity, controls), (availability, risk)}

B. SCinformation system = {(confidentiality, risk), (integrity, impact), (availability, controls)}

C. SCinformation system = {(confidentiality, impact), (integrity, impact), (availability, impact)}

D. SCinformation system = {(confidentiality, controls), (integrity, controls), (availability, controls )}