ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 121:

  Which of the following configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available

  A. Configuration Identification
  B. Configuration Verification and Audit
  C. Configuration Status and Accounting
  D. Configuration Control
  C. Configuration Status and Accounting

• Question 122:

  You work as a systems engineer for BlueWell Inc. You want to protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non- repudiation. Which of the following processes will you use to accomplish the task

  A. Information Assurance (IA)
  B. Risk Management
  C. Risk Analysis
  D. Information Systems Security Engineering (ISSE)
  A. Information Assurance (IA)

• Question 123:

  In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47, do the organizations build and execute a plan for establishing the interconnection, including executing or configuring appropriate security controls

  A. Establishing the interconnection
  B. Planning the interconnection
  C. Disconnecting the interconnection
  D. Maintaining the interconnection
  A. Establishing the interconnection

• Question 124:

  Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart

  A. Risk response plan
  B. Quantitative analysis
  C. Risk response
  D. Contingency reserve
  D. Contingency reserve

• Question 125:

  Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality

  A. Information Protection Policy (IPP)
  B. IMM
  C. System Security Context
  D. CONOPS
  A. Information Protection Policy (IPP)

• Question 126:

  FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls are tested and reviewed

  A. Level 4
  B. Level 5
  C. Level 1
  D. Level 2
  E. Level 3
  A. Level 4

• Question 127:

  Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted as a Federal Information Processing Standard

  A. Type III (E) cryptography
  B. Type III cryptography
  C. Type I cryptography
  D. Type II cryptography
  B. Type III cryptography

• Question 128:

  Which of the following types of CNSS issuances establishes criteria, and assigns responsibilities

  A. Advisory memoranda
  B. Directives
  C. Instructions
  D. Policies
  D. Policies

• Question 129:

  Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection mechanism

  A. Internet Key Exchange (IKE) Protocol
  B. SMIME
  C. Internet Protocol Security (IPSec)
  D. Secure Socket Layer (SSL)
  C. Internet Protocol Security (IPSec)

• Question 130:

  Which of the following organizations is a USG initiative designed to meet the security testing, evaluation, and assessment needs of both information technology (IT) producers and consumers

  A. NSA
  B. NIST
  C. CNSS
  D. NIAP
  D. NIAP