Trusted Agent (TA) Practice Test

In RMF, the Prepare phase is about getting everything ready and setting the scope for the process. That means setting up the environment, identifying the system, its boundaries, interfaces, and the roles and responsibilities of everyone involved, along with how risk will be managed. Defining boundaries and establishing the environment lays the groundwork for all subsequent steps, ensuring that categorization, control selection, and deployment are done against a clear, correctly scoped system.

Defining impact levels is done during the categorization step, where you determine the potential impact on the organization’s operations, assets, and individuals. Selecting security controls comes next, in the control selection step. Deploying controls occurs later when implementing and applying those controls.