ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 1:

  Which of the following are the subtasks of the Define Life-Cycle Process Concepts task Each correct answer represents a complete solution. Choose all that apply.

  A. Training
  B. Personnel
  C. Control
  D. Manpower
  A. Training
  B. Personnel
  D. Manpower

• Question 2:

  The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3 Each correct answer represents a complete solution. Choose all that apply.

  A. Agree on a strategy to mitigate risks.
  B. Evaluate mitigation progress and plan next assessment.
  C. Identify threats, vulnerabilities, and controls that will be evaluated.
  D. Document and implement a mitigation plan.
  A. Agree on a strategy to mitigate risks.
  B. Evaluate mitigation progress and plan next assessment.
  D. Document and implement a mitigation plan.

• Question 3:

  Fill in the blanks with an appropriate phrase. A ________ is an approved build of the product, and can be a single component or a combination of components.

  development baseline

• Question 4:

  Which of the following email lists is written for the technical audiences, and provides weekly summaries of security issues, new vulnerabilities, potential impact, patches and workarounds, as well as the actions recommended to mitigate risk

  A. Cyber Security Tip
  B. Cyber Security Alert
  C. Cyber Security Bulletin
  D. Technical Cyber Security Alert
  C. Cyber Security Bulletin

• Question 5:

  Which of the following CNSS policies describes the national policy on securing voice communications

  A. NSTISSP No. 6
  B. NSTISSP No. 7
  C. NSTISSP No. 101
  D. NSTISSP No. 200
  C. NSTISSP No. 101

• Question 6:

  Which of the following rated systems of the Orange book has mandatory protection of the TCB

  A. C-rated
  B. B-rated
  C. D-rated
  D. A-rated
  B. B-rated

• Question 7:

  Which of the following is a 1996 United States federal law, designed to improve the way the federal government acquires, uses, and disposes information technology

  A. Lanham Act
  B. Clinger-Cohen Act
  C. Computer Misuse Act
  D. Paperwork Reduction Act
  B. Clinger-Cohen Act

• Question 8:

  Which of the following acts is endorsed to provide a clear statement of the proscribed activity concerning computers to the law enforcement community, those who own and operate computers, and those tempted to commit crimes by unauthorized access to computers

  A. Computer Fraud and Abuse Act
  B. Government Information Security Reform Act (GISRA)
  C. Computer Security Act
  D. Federal Information Security Management Act (FISMA)
  A. Computer Fraud and Abuse Act

• Question 9:

  A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies Each correct answer represents a complete solution. Choose all that apply.

  A. Regulatory
  B. Advisory
  C. Systematic
  D. Informative
  A. Regulatory
  B. Advisory
  D. Informative

• Question 10:

  The Phase 4 of DITSCAP CandA is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase Each correct answer represents a complete solution. Choose all that apply.

  A. Security operations
  B. Continue to review and refine the SSAA
  C. Change management
  D. Compliance validation
  E. System operations
  F. Maintenance of the SSAA
  A. Security operations
  C. Change management
  D. Compliance validation
  E. System operations
  F. Maintenance of the SSAA