ISC CISSP-ISSEP Online Practice Questions and Exam Preparation

ISC CISSP-ISSEP Online Questions & Answers

• Question 81:

  Which of the following Net-Centric Data Strategy goals are required to increase enterprise and community data over private user and system data Each correct answer represents a complete solution. Choose all that apply.

  A. Understandability
  B. Visibility
  C. Interoperability
  D. Accessibility
  B. Visibility
  D. Accessibility

• Question 82:

  In 2003, NIST developed a new Certification and Accreditation (CandA) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199 Each correct answer represents a complete solution. Choose all that apply.

  A. High
  B. Medium
  C. Low
  D. Moderate
  A. High
  B. Medium
  C. Low

• Question 83:

  Which of the following configuration management system processes defines which items will be configuration managed, how they are to be identified, and how they are to be documented

  A. Configuration verification and audit
  B. Configuration control
  C. Configuration status accounting
  D. Configuration identification
  D. Configuration identification

• Question 84:

  Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States

  A. Lanham Act
  B. FISMA
  C. Computer Fraud and Abuse Act
  D. Computer Misuse Act
  B. FISMA

• Question 85:

  According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD Each correct answer represents a complete solution. Choose all that apply.

  A. DC Security Design and Configuration
  B. EC Enclave and Computing Environment
  C. VI Vulnerability and Incident Management
  D. Information systems acquisition, development, and maintenance
  A. DC Security Design and Configuration
  B. EC Enclave and Computing Environment
  C. VI Vulnerability and Incident Management

• Question 86:

  Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk responses for the risk event. The event is not likely to happen for several months but the probability of the event is high. Which one of the following is a valid response to the identified risk event

  A. Earned value management
  B. Risk audit
  C. Corrective action
  D. Technical performance measurement
  C. Corrective action

• Question 87:

  Which of the following is a type of security management for computers and networks in order to identify security breaches

  A. IPS
  B. IDS
  C. ASA
  D. EAP
  B. IDS

• Question 88:

  Which of the following organizations incorporates building secure audio and video communications equipment, making tamper protection products, and providing trusted microelectronics solutions

  A. DTIC
  B. NSA IAD
  C. DIAP
  D. DARPA
  B. NSA IAD

• Question 89:

  Which of the following phases of the ISSE model is used to determine why the system needs to be built and what information needs to be protected

  A. Develop detailed security design
  B. Define system security requirements
  C. Discover information protection needs
  D. Define system security architecture
  C. Discover information protection needs

• Question 90:

  Which of the following individuals is an upper-level manager who has the power and capability to evaluate the mission, business case, and budgetary needs of the system while also considering the security risks

  A. User Representative
  B. Program Manager
  C. Certifier
  D. DAA
  D. DAA