ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 71:

  You work as a security manager for BlueWell Inc. You are going through the NIST SP 800-37 CandA methodology, which is based on four well defined phases. In which of the following phases of NIST SP 800-37 CandA methodology does the security categorization occur

  A. Continuous Monitoring
  B. Initiation
  C. Security Certification
  D. Security Accreditation
  B. Initiation

• Question 72:

  The Phase 2 of DITSCAP CandA is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation. What are the process activities of this phase Each correct answer represents a complete solution. Choose all that apply.

  A. Assessment of the Analysis Results
  B. Certification analysis
  C. Registration
  D. System development
  E. Configuring refinement of the SSAA
  A. Assessment of the Analysis Results
  B. Certification analysis
  D. System development
  E. Configuring refinement of the SSAA

• Question 73:

  A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. Which of the following are required to be addressed in a well designed policy Each correct answer represents a part of the solution. Choose all that apply.

  A. What is being secured
  B. Who is expected to comply with the policy
  C. Where is the vulnerability, threat, or risk
  D. Who is expected to exploit the vulnerability
  A. What is being secured
  B. Who is expected to comply with the policy
  C. Where is the vulnerability, threat, or risk

• Question 74:

  Which of the following tasks prepares the technical management plan in planning the technical effort

  A. Task 10
  B. Task 9
  C. Task 7
  D. Task 8
  B. Task 9

• Question 75:

  Which of the following approaches can be used to build a security program Each correct answer represents a complete solution. Choose all that apply.

  A. Right-Up Approach
  B. Left-Up Approach
  C. Bottom-Up Approach
  D. Top-Down Approach
  C. Bottom-Up Approach
  D. Top-Down Approach

• Question 76:

  According to which of the following DoD policies, the implementation of DITSCAP is mandatory for all the systems that process both DoD classified and unclassified information?

  A. DoD 8500.2
  B. DoDI 5200.40
  C. DoD 8510.1-M DITSCAP
  D. DoD 8500.1 (IAW)
  D. DoD 8500.1 (IAW)

• Question 77:

  You work as a security engineer for BlueWell Inc. According to you, which of the following statements determines the main focus of the ISSE process A. Design information systems that will meet the certification and accreditation documentation.

  B. Identify the information protection needs.
  C. Ensure information systems are designed and developed with functional relevance.
  D. Instruct systems engineers on availability, integrity, and confidentiality.
  B. Identify the information protection needs.

• Question 78:

  Which of the following DITSCAPNIACAP model phases is used to confirm that the evolving system development and integration complies with the agreements between role players documented in the first phase

  A. Verification
  B. Validation
  C. Post accreditation
  D. Definition
  A. Verification

• Question 79:

  Which of the following cooperative programs carried out by NIST conducts research to advance the nation's technology infrastructure

  A. Manufacturing Extension Partnership
  B. NIST Laboratories
  C. Baldrige National Quality Program
  D. Advanced Technology Program
  B. NIST Laboratories

• Question 80:

  Which of the following security controls is a set of layered security services that address communications and data security problems in the emerging Internet and intranet application space

  A. Internet Protocol Security (IPSec)
  B. Common data security architecture (CDSA)
  C. File encryptors
  D. Application program interface (API)
  B. Common data security architecture (CDSA)