Certified Authorization Professional

Here you have the best ISC CAP practice exam questions

You have 395 total questions across 79 pages (5 per page)
These questions were last updated on February 6, 2026
This site is not affiliated with or endorsed by ISC.

Question 1 of 395

Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process?

A.

Senior Agency Information Security Officer

B.

Authorizing Official

C.

Common Control Provider

D.

Chief Information Officer

Suggested Answer: C

Community votes

No votes yet

Question 2 of 395

The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer?
Each correct answer represents a complete solution. Choose all that apply.

A.

Preserving high-level communications and working group relationships in an organization

B.

Facilitating the sharing of security risk-related information among authorizing officials

C.

Establishing effective continuous monitoring program for the organization

D.

Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan

Suggested Answer: A, C, D

Community votes

No votes yet

Question 3 of 395

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about ISSO and ISSE?
Each correct answer represents a complete solution. Choose all that apply.

A.

An ISSE provides advice on the impacts of system changes.

B.

An ISSE manages the security of the information system that is slated for Certification & Accreditation (C&A).

C.

An ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A).

D.

An ISSO takes part in the development activities that are required to implement system changes.

E.

An ISSE provides advice on the continuous monitoring of the information system.

Suggested Answer: A, C, E

Community votes

No votes yet

Question 4 of 395

Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?

A.

Information system owner

B.

Authorizing Official

C.

Chief Risk Officer (CRO)

D.

Chief Information Officer (CIO)

Suggested Answer: A

Community votes

No votes yet

Question 5 of 395

Which of the following assessment methodologies defines a six-step technical security evaluation?

A.

FITSAF

B.

FIPS 102

C.

OCTAVE

D.

DITSCAP

Suggested Answer: B

Community votes

No votes yet

About the ISC CAP Certification Exam

About the Exam

The ISC CAP (Certified Authorization Professional) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 395 practice questions across 79 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our CAP questions are regularly updated to reflect the latest exam objectives.