Final Exam for: IS-860.c: The National Infrastructure Protection Plan, An Introduction

Document Content and Description Below

Final Exam for: IS-860.c: The National Infrastructure Protection Plan, An Introduction Privacy Act Statement (Public Law 93 579) Each time that this test is loaded, you will receive a unique set o... f questions and answers. The test questions are scrambled to protect the integrity of the exam. 1. Which of the following statements describes the benefits of information sharing? A. Information sharing enhances owners' and operators' ability to assess risks, make prudent security investments and develop appropriate resilience strategies. B. Information sharing enhances government's ability to adjust its information collection, analysis, synthesis and dissemination activities based on the needs of the private sector. C. The increasing availability of data and information essential to operating and maintaining infrastructure and related technologies enables more efficient and effective practices. D. Multidirectional information sharing enhances owners and operators ability to assess risks, make prudent security investments and develop appropriate resilience strategies E. All of the Above 2. Dependencies and interdependencies emerging from complex cyber capabilities and limitations is an example of which risk element? A. Vulnerability B. Threat C. Consequence Your text here 1 D. Human 3. Which of the following activities that SLTT Executives Can Do support the NIPP 2013 Core Tenet category, "Build upon partnership efforts"? A. Use existing partnership structures to enhance relationships across the critical infrastructure community. B. Consider security and resilience when designing infrastructure. C. Understand interdependencies. D. Identify effective security and resilience practices. 4. All of the following statements about the importance of critical infrastructure partnerships are true EXCEPT A. Critical infrastructure partners require efficient sharing of actionable and relevant information among partners to build situational awareness and enable effective risk-informed decision making B. The critical infrastructure partnership community involved in managing risks is wide-ranging, composed of owners and operators; Federal, State, local, tribal and territorial governments; regional entities; non-profit organizations; and academia. C. To achieve security and resilience, critical infrastructure partners must leverage the full spectrum of capabilities, expertise and experience across the critical infrastructure community and associated stakeholders. D. The Federal, State, local, tribal and territorial government is ultimately responsible for managing all risks to critical infrastructure for private and public sector partners; regional entities; non-profit organizations; and academia. 5. Which of the following NIPP Core Tenets statement is correct? A. The partnership approach to critical infrastructure security and resilience recognizes the unique perspectives and competitive advantages of the diverse critical infrastructure community. B. Risk should be identified and managed in a coordinated and comprehensive way across the critical infrastructure community to restrict allocation of security and resilience resources. C. Gaining knowledge of infrastructure risk and interdependencies requires sharing classified information across the entire critical infrastructure community. D. Understanding and addressing risks from cross-sector dependencies and interdependencies is essential to enhancing critical infrastructure security and resilience. 6. All of the following statements are Key Concepts highlighted in NIPP 2013 EXCEPT: A. The Nation's critical infrastructure is largely owned and operated by the private sector; however, Federal and SLTT governments also own and operate critical infrastructure, as do foreign entities and companies. B. Developing partnerships with private sector stakeholders is an option for consideration by government decision makers ultimately responsible for implementing effective and efficient risk management. C. Risk management and prevention and protection activities contribute to strengthening critical infrastructure security and resilience. D. Having accurate information and analysis about risk is essential to achieving resilience. 7. The NIPP Call to Action is meant to guide the collaborative efforts of the critical infrastructure community to advance security and resilience outcomes under three broad activity categories. All of the following activities are categorized under Build upon Partnerships Efforts EXCEPT: A. Determine collective actions through joint planning efforts B. Promote infrastructure, community and regional recovery following incidents C. Empower local and regional partnerships to build capacity nationally D. Set national focus through jointly developed priorities E. Leverage incentives to advance security and resilience 8. What NIPP 2013 element provide a basis for the critical infrastructure community to work jointly to set specific national priorities? A. Partnership Model B. Risk Management Framework C. Core Tenets D. Mission, vision, and goals. E. Call to Action 9. To which of the following critical infrastructure partners does PPD-21 assign the responsibility of leveraging support from homeland security assistance programs and reflecting priority activities in their strategies to ensure that resources are effectively allocated? A. Critical infrastructure owners and operators B. The Department of Homeland Security C. Regional, State, local, Tribal, and Territorial jurisdictions D. Other Federal departments and agencies 10. Consisting of officials from the Sector-specific Agencies and other Federal departments and agencies, this forum facilitates critical infrastructure security and resilience communication and coordination across the Federal Government. A. Regional Consortium Coordinating Council (RC3) B. State, Local, Tribal and Territorial Government Coordinating Council (SLTTGCC) C. Federal Senior Leadership Council (FSLC) D. Sector Coordinating Councils (SCC) 11. NIPP framework is designed to address which of the following types of events? A. A blackout affecting the Northeast B. Disruptions to infrastructure systems that cause cascading effects over multiple jurisdictions C. Long term risk management planning to address prolonged floods and droughts D. Cyber intrusions resulting in physical infrastructure failures and vice versa E. All of the above 12. Make the following statement True by filling in the blank from the choices below: Regional organizations play an important partnership role in the critical infrastructure security and resilience community because they ____. A. Include a variety of public-private sector initiatives that cross jurisdictional and/or sector boundaries and focus on prevention, protection, mitigation, response, and recovery within a defined geographic area. B. Are crucial coordination hubs, bringing together prevention, protection, mitigation, response, and recovery authorities, capabilities, and resources among local jurisdictions, across sectors, and between regional entities. C. Have unique responsibilities, functions, or expertise in a particular critical infrastructure sector (such as GCC members) assist in identifying and assessing high-consequence critical infrastructure and collaborate with relevant partners to share security and resiliencerelated information within the sector, as appropriate. D. Develop and implement security and resilience programs for the critical infrastructure under their control, while taking into consideration the public good as well. 13. To achieve security and resilience, critical infrastructure partners must: A. Implement an integration and analysis function within each organization to inform partners of critical infrastructure planning and operations decisions. B. Leverage the full spectrum of capabilities, expertise and experience across the critical infrastructure community and associated stakeholders. C. Restrict information sharing activities to departments and agencies within the intelligence community. D. Support all Federal, State, local, tribal and territorial government efforts to effect national critical infrastructure security and resilience. 14. For what group of stakeholders are the following examples of activities suggested: Foster active local and regional crosssector partnerships; encourage private sector and emergency response coordination on emergency management plans and exercises; and understand interdependencies A. State, Local, Tribal, and Territorial Government Executives B. Private Sector Companies C. First Responders D. All of the Above 15. ALL of the following statements directly to one of the seven NIPP 2013 core tenets EXCEPT: A. Managing risk requires sharing information, promoting efficient and effective use of resources and minimizing duplication of effort. B. Hazard assessments draw on theoretical scenarios and deductive reasoning about future natural hazards to as [Show More]

Last updated: 1 year ago

Preview 1 out of 11 pages