Certification and Accreditation (C&A or CnA) Is a Process for Implementing

question 186

Multiple Choice

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution. Choose two.

• A) Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
• B) Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
• C) Certification is the official management decision given by a senior agency official to authorize operation of an information system.
• D) Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.

---

Definitions:

Obstetrics/Gynecology

A medical specialty focused on childbirth and the care of women's reproductive systems.

Room Temperature

The average ambient indoor temperature, typically considered to be about 20°C (68°F) to 22°C (72°F).

Formal Appearance

The act or requirement of presenting oneself in a prescribed, professionally acceptable manner or attire, often within a work or official setting.

Warm Colors

Hues in the color spectrum known for their association with warmth, typically including reds, oranges, and yellows.