Final Exam for: IS-860.c: The National
Infrastructure Protection Plan, An
Introduction
Privacy Act Statement (Public Law 93 579)
Each time that this test is loaded, you will receive a unique set of
questions and ans
...
Final Exam for: IS-860.c: The National
Infrastructure Protection Plan, An
Introduction
Privacy Act Statement (Public Law 93 579)
Each time that this test is loaded, you will receive a unique set of
questions and answers. The test questions are scrambled to protect
the integrity of the exam.
1. Which of the following statements describes the benefits of
information sharing?
A. Information sharing enhances owners' and operators' ability to
assess risks, make prudent security investments and develop
appropriate resilience strategies.
B. Information sharing enhances government's ability to adjust its
information collection, analysis, synthesis and dissemination activities
based on the needs of the private sector.
C. The increasing availability of data and information essential to
operating and maintaining infrastructure and related technologies
enables more efficient and effective practices.
D. Multidirectional information sharing enhances owners and
operators ability to assess risks, make prudent security investments
and develop appropriate resilience strategies
E. All of the Above
2. Dependencies and interdependencies emerging from complex
cyber capabilities and limitations is an example of which risk
element?
A. Vulnerability
B. Threat
C. Consequence
Your text here 1
D. Human
3. Which of the following activities that SLTT Executives Can Do
support the NIPP 2013 Core Tenet category, "Build upon
partnership efforts"?
A. Use existing partnership structures to enhance relationships
across the critical infrastructure community.
B. Consider security and resilience when designing infrastructure.
C. Understand interdependencies.
D. Identify effective security and resilience practices.
4. All of the following statements about the importance of critical
infrastructure partnerships are true EXCEPT
A. Critical infrastructure partners require efficient sharing of
actionable and relevant information among partners to build
situational awareness and enable effective risk-informed decision
making
B. The critical infrastructure partnership community involved in
managing risks is wide-ranging, composed of owners and operators;
Federal, State, local, tribal and territorial governments; regional
entities; non-profit organizations; and academia.
C. To achieve security and resilience, critical infrastructure partners
must leverage the full spectrum of capabilities, expertise and
experience across the critical infrastructure community and
associated stakeholders.
D. The Federal, State, local, tribal and territorial government is
ultimately responsible for managing all risks to critical infrastructure
for private and public sector partners; regional entities; non-profit
organizations; and academia.
5. Which of the following NIPP Core Tenets statement is correct?
A. The partnership approach to critical infrastructure security and
resilience recognizes the unique perspectives and competitive
advantages of the diverse critical infrastructure community.
B. Risk should be identified and managed in a coordinated and
comprehensive way across the critical infrastructure community to
restrict allocation of security and resilience resources.
C. Gaining knowledge of infrastructure risk and interdependencies
requires sharing classified information across the entire critical
infrastructure community.
D. Understanding and addressing risks from cross-sector
dependencies and interdependencies is essential to enhancing
critical infrastructure security and resilience.
6. All of the following statements are Key Concepts highlighted
in NIPP 2013 EXCEPT:
A. The Nation's critical infrastructure is largely owned and operated
by the private sector; however, Federal and SLTT governments also
own and operate critical infrastructure, as do foreign entities and
companies.
B. Developing partnerships with private sector stakeholders is an
option for consideration by government decision makers ultimately
responsible for implementing effective and efficient risk management.
C. Risk management and prevention and protection activities
contribute to strengthening critical infrastructure security and
resilience.
D. Having accurate information and analysis about risk is essential to
achieving resilience.
7. The NIPP Call to Action is meant to guide the collaborative
efforts of the critical infrastructure community to advance
security and resilience outcomes under three broad activity
categories. All of the following activities are categorized under
Build upon Partnerships Efforts EXCEPT:
A. Determine collective actions through joint planning efforts
B. Promote infrastructure, community and regional recovery following
incidents
C. Empower local and regional partnerships to build capacity
nationally
D. Set national focus through jointly developed priorities
E. Leverage incentives to advance security and resilience
8. What NIPP 2013 element provide a basis for the critical
infrastructure community to work jointly to set specific national
priorities?
A. Partnership Model
B. Risk Management Framework
C. Core Tenets
D. Mission, vision, and goals.
E. Call to Action
9. To which of the following critical infrastructure partners does
PPD-21 assign the responsibility of leveraging support from
homeland security assistance programs and reflecting priority
activities in their strategies to ensure that resources are
effectively allocated?
A. Critical infrastructure owners and operators
B. The Department of Homeland Security
C. Regional, State, local, Tribal, and Territorial jurisdictions
D. Other Federal departments and agencies
10. Consisting of officials from the Sector-specific Agencies and
other Federal departments and agencies, this forum facilitates
critical infrastructure security and resilience communication and
coordination across the Federal Government.
A. Regional Consortium Coordinating Council (RC3)
B. State, Local, Tribal and Territorial Government Coordinating
Council (SLTTGCC)
C. Federal Senior Leadership Council (FSLC)
D. Sector Coordinating Councils (SCC)
11. NIPP framework is designed to address which of the
following types of events?
A. A blackout affecting the Northeast
B. Disruptions to infrastructure systems that cause cascading effects
over multiple jurisdictions
C. Long term risk management planning to address prolonged floods
and droughts
D. Cyber intrusions resulting in physical infrastructure failures and
vice versa
E. All of the above
12. Make the following statement True by filling in the blank from
the choices below: Regional organizations play an important
partnership role in the critical infrastructure security and
resilience community because they ____.
A. Include a variety of public-private sector initiatives that cross
jurisdictional and/or sector boundaries and focus on prevention,
protection, mitigation, response, and recovery within a defined
geographic area.
B. Are crucial coordination hubs, bringing together prevention,
protection, mitigation, response, and recovery authorities,
capabilities, and resources among local jurisdictions, across sectors,
and between regional entities.
C. Have unique responsibilities, functions, or expertise in a particular
critical infrastructure sector (such as GCC members) assist in
identifying and assessing high-consequence critical infrastructure and
collaborate with relevant partners to share security and resiliencerelated information within the sector, as appropriate.
D. Develop and implement security and resilience programs for the
critical infrastructure under their control, while taking into
consideration the public good as well.
13. To achieve security and resilience, critical infrastructure
partners must:
A. Implement an integration and analysis function within each
organization to inform partners of critical infrastructure planning and
operations decisions.
B. Leverage the full spectrum of capabilities, expertise and
experience across the critical infrastructure community and
associated stakeholders.
C. Restrict information sharing activities to departments and agencies
within the intelligence community.
D. Support all Federal, State, local, tribal and territorial government
efforts to effect national critical infrastructure security and resilience.
14. For what group of stakeholders are the following examples
of activities suggested: Foster active local and regional crosssector partnerships; encourage private sector and emergency
response coordination on emergency management plans and
exercises; and understand interdependencies
A. State, Local, Tribal, and Territorial Government Executives
B. Private Sector Companies
C. First Responders
D. All of the Above
15. ALL of the following statements directly to one of the seven
NIPP 2013 core tenets EXCEPT:
A. Managing risk requires sharing information, promoting efficient and
effective use of resources and minimizing duplication of effort.
B. Hazard assessments draw on theoretical scenarios and deductive
reasoning about future natural hazards to as
[Show More]
