Question 1
Which of the following is not a step in the NIST RMF?
Categorize System
Select Controls
Implement Controls
Define Controls
Authorize System
Question 2
According to NIST RMF documentation, is automated software necessary to implement continuous monitoring?
Yes
No
Next Concept