ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 141:

  Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States Code

  A. Type I cryptography
  B. Type II cryptography
  C. Type III (E) cryptography
  D. Type III cryptography
  B. Type II cryptography

• Question 142:

  You have been tasked with finding an encryption methodology that will encrypt most types of email attachments. The requirements are that your solution must use the RSA algorithm. Which of the following is your best choice

  A. PGP
  B. SMIME
  C. DES
  D. Blowfish
  B. SMIME

• Question 143:

  Which of the following documents is described in the statement below It is developed along with all processes of the risk management. It contains the results of the qualitative risk analysis, quantitative risk analysis, and risk response planning.

  A. Risk management plan
  B. Project charter
  C. Quality management plan
  D. Risk register
  D. Risk register

• Question 144:

  Which of the following cooperative programs carried out by NIST speed ups the development of modern technologies for broad, national benefit by co-funding research and development partnerships with the private sector

  A. Baldrige National Quality Program
  B. Advanced Technology Program
  C. Manufacturing Extension Partnership
  D. NIST Laboratories
  B. Advanced Technology Program

• Question 145:

  Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process

  A. Chief Information Officer
  B. Authorizing Official
  C. Common Control Provider
  D. Senior Agency Information Security Officer
  C. Common Control Provider

• Question 146:

  Which of the following terms describes the security of an information system against unauthorized access to or modification of information, whether in storage, processing, or transit, and against the denial of service to authorized users or the provision of service to unauthorized users

  A. Information Assurance (IA)
  B. Information Systems Security Engineering (ISSE)
  C. Information Protection Policy (IPP)
  D. Information systems security (InfoSec)
  D. Information systems security (InfoSec)

• Question 147:

  System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan Each correct answer represents a part of the solution. Choose all that apply.

  A. Certification
  B. Authorization
  C. Post-certification
  D. Post-Authorization
  E. Pre-certification
  A. Certification
  B. Authorization
  D. Post-Authorization
  E. Pre-certification

• Question 148:

  Which of the following individuals reviews and approves project deliverables from a QA perspective

  A. Information systems security engineer
  B. System owner
  C. Quality assurance manager
  D. Project manager
  C. Quality assurance manager

• Question 149:

  Which of the following elements are described by the functional requirements task Each correct answer represents a complete solution. Choose all that apply.

  A. Coverage
  B. Accuracy
  C. Quality
  D. Quantity
  A. Coverage
  C. Quality
  D. Quantity

• Question 150:

  Which of the following federal laws establishes roles and responsibilities for information security, risk management, testing, and training, and authorizes NIST and NSA to provide guidance for security planning and implementation

  A. Computer Fraud and Abuse Act
  B. Government Information Security Reform Act (GISRA)
  C. Federal Information Security Management Act (FISMA)
  D. Computer Security Act
  B. Government Information Security Reform Act (GISRA)