ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 131:

  Which of the following tools demands involvement by upper executives, in order to integrate quality into the business system and avoid delegation of quality functions to junior administrators

  A. ISO 90012000
  B. Benchmarking
  C. SEI-CMM
  D. Six Sigma
  A. ISO 90012000

• Question 132:

  Which of the following laws is the first to implement penalties for the creator of viruses, worms, and other types of malicious code that causes harm to the computer systems

  A. Computer Fraud and Abuse Act
  B. Computer Security Act
  C. Gramm-Leach-Bliley Act
  D. Digital Millennium Copyright Act
  A. Computer Fraud and Abuse Act

• Question 133:

  Which of the following characteristics are described by the DIAP Information Readiness Assessment function Each correct answer represents a complete solution. Choose all that apply.

  A. It performs vulnerabilitythreat analysis assessment.
  B. It provides for entry and storage of individual system data.
  C. It provides data needed to accurately assess IA readiness.
  D. It identifies and generates IA requirements.
  A. It performs vulnerabilitythreat analysis assessment.
  C. It provides data needed to accurately assess IA readiness.
  D. It identifies and generates IA requirements.

• Question 134:

  Which of the following Registration Tasks notifies the DAA, Certifier, and User Representative that the system requires CandA Support

  A. Registration Task 4
  B. Registration Task 1
  C. Registration Task 3
  D. Registration Task 2
  D. Registration Task 2

• Question 135:

  Which of the following agencies is responsible for funding the development of many technologies such as computer networking, as well as NLS

  A. DARPA
  B. DTIC
  C. DISA
  D. DIAP
  A. DARPA

• Question 136:

  What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process Each correct answer represents a complete solution. Choose all that apply.

  A. Conduct activities related to the disposition of the system data and objects.
  B. Combine validation results in DIACAP scorecard.
  C. Conduct validation activities.
  D. Execute and update IA implementation plan.
  B. Combine validation results in DIACAP scorecard.
  C. Conduct validation activities.
  D. Execute and update IA implementation plan.

• Question 137:

  Which of the following sections of the SEMP template defines the project constraints, to include constraints on funding, personnel, facilities, manufacturing capability and capacity, critical resources, and other constraints

  A. Section 3.1.5
  B. Section 3.1.8
  C. Section 3.1.9
  D. Section 3.1.7
  B. Section 3.1.8

• Question 138:

  FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high level potential impact

  A. The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.
  B. The loss of confidentiality, integrity, or availability might result in major financial losses.
  C. The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.
  D. The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.
  A. The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.
  B. The loss of confidentiality, integrity, or availability might result in major financial losses.
  C. The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.
  D. The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.

• Question 139:

  You are working as a project manager in your organization. You are nearing the final stages of project execution and looking towards the final risk monitoring and controlling activities. For your project archives, which one of the following is an output of risk monitoring and control

  A. Quantitative risk analysis
  B. Risk audits
  C. Requested changes
  D. Qualitative risk analysis
  C. Requested changes

• Question 140:

  Which of the following documents were developed by NIST for conducting Certification and Accreditation (CandA) Each correct answer represents a complete solution. Choose all that apply.

  A. NIST Special Publication 800-59
  B. NIST Special Publication 800-60
  C. NIST Special Publication 800-37A
  D. NIST Special Publication 800-37
  E. NIST Special Publication 800-53
  F. NIST Special Publication 800-53A
  A. NIST Special Publication 800-59
  B. NIST Special Publication 800-60
  D. NIST Special Publication 800-37
  E. NIST Special Publication 800-53
  F. NIST Special Publication 800-53A