ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 101:

  In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47 does the participating organizations perform the following tasks Perform preliminary activities. Examine all relevant technical, security and administrative issues. Form an agreement governing the management, operation, and use of the interconnection.

  A. Establishing the interconnection
  B. Disconnecting the interconnection
  C. Planning the interconnection
  D. Maintaining the interconnection
  C. Planning the interconnection

• Question 102:

  Which of the following certification levels requires the completion of the minimum security checklist, and the system user or an independent certifier can complete the checklist

  A. CL 2
  B. CL 3
  C. CL 1
  D. CL 4
  C. CL 1

• Question 103:

  The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer Each correct answer represents a complete solution. Choose all that apply.

  A. Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan
  B. Preserving high-level communications and working group relationships in an organization
  C. Establishing effective continuous monitoring program for the organization
  D. Facilitating the sharing of security risk-related information among authorizing officials
  A. Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan
  B. Preserving high-level communications and working group relationships in an organization
  C. Establishing effective continuous monitoring program for the organization

• Question 104:

  Fill in the blank with an appropriate phrase. The ____________ helps the customer understand and document the information management needs that support the business or mission.

  systems engineer

• Question 105:

  Which of the following cooperative programs carried out by NIST encourages performance excellence among U.S. manufacturers, service companies, educational institutions, and healthcare providers

  A. Manufacturing Extension Partnership
  B. Baldrige National Quality Program
  C. Advanced Technology Program
  D. NIST Laboratories
  B. Baldrige National Quality Program

• Question 106:

  An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing Official Each correct answer represents a complete solution. Choose all that apply.

  A. Ascertaining the security posture of the organization's information system
  B. Reviewing security status reports and critical security documents
  C. Determining the requirement of reauthorization and reauthorizing information systems when required
  D. Establishing and implementing the organization's continuous monitoring program
  A. Ascertaining the security posture of the organization's information system
  B. Reviewing security status reports and critical security documents
  C. Determining the requirement of reauthorization and reauthorizing information systems when required

• Question 107:

  Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production Each correct answer represents a part of the solution. Choose all that apply.

  A. Office of Management and Budget (OMB)
  B. NIST
  C. FISMA
  D. FIPS
  C. FISMA

• Question 108:

  Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system

  A. SSAA
  B. TCSEC
  C. FIPS
  D. FITSAF
  B. TCSEC

• Question 109:

  Fill in the blank with an appropriate phrase. __________ seeks to improve the quality of process outputs by identifying and removing the causes of defects and variability in manufacturing and business processes.

  Six Sigma

• Question 110:

  Fill in the blank with an appropriate phrase. _________________ is used to verify and accredit systems by making a standard process, set of activities, general tasks, and management structure.

  DITSCAPNIACAP