Want to know features? Want to lear more about experience? Study . Gat a success with an absolute guarantee to pass ISC2 CISSP-ISSEP (Information Systems Security Engineering Professional) test on your first attempt.
Free demo questions for ISC2 CISSP-ISSEP Exam Dumps Below:
NEW QUESTION 1
Which of the following is used to indicate that the software has met a defined quality level and is ready for mass distribution either by electronic means or by physical media
- A. ATM
- B. RTM
- C. CRO
- D. DAA
Answer: B
NEW QUESTION 2
Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production
Each correct answer represents a part of the solution. Choose all that apply.
- A. Office of Management and Budget (OMB)
- B. NIST
- C. FISMA
- D. FIPS
Answer: C
NEW QUESTION 3
The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and
telecommunications systems that handle U.S. national security information. What are the different types of NIACAP accreditation Each correct answer represents a complete solution. Choose all that apply.
- A. Type accreditation
- B. Site accreditation
- C. System accreditation
- D. Secure accreditation
Answer: ABC
NEW QUESTION 4
In which of the following phases of the interconnection life cycle as defined by NIST SP
800-47 does the participating organizations perform the following tasks Perform preliminary activities. Examine all relevant technical, security and administrative issues. Form an agreement governing the management, operation, and use of the interconnection.
- A. Establishing the interconnection
- B. Disconnecting the interconnection
- C. Planning the interconnection
- D. Maintaining the interconnection
Answer: C
NEW QUESTION 5
Which of the following individuals informs all C&A participants about life cycle actions, security requirements, and documented user needs
- A. User representative
- B. DAA
- C. Certification Agent
- D. IS program manager
Answer: D
NEW QUESTION 6
Fill in the blank with an appropriate phrase. seeks to improve the quality of process outputs by identifying and removing the causes of defects and variability in manufacturing and business processes.
- A. Six Sigma
Answer: A
NEW QUESTION 7
Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality
- A. Information Protection Policy (IPP)
- B. IMM
- C. System Security Context
- D. CONOPS
Answer: A
NEW QUESTION 8
Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection mechanism
- A. Internet Key Exchange (IKE) Protocol
- B. SMIME
- C. Internet Protocol Security (IPSec)
- D. Secure Socket Layer (SSL)
Answer: C
NEW QUESTION 9
Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems
- A. SSAA
- B. FITSAF
- C. FIPS
- D. TCSEC
Answer: A
NEW QUESTION 10
Which of the following federal agencies has the objective to develop and promote measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life
- A. National Institute of Standards and Technology (NIST)
- B. National Security Agency (NSA)
- C. Committee on National Security Systems (CNSS)
- D. United States Congress
Answer: A
NEW QUESTION 11
Which of the following federal laws establishes roles and responsibilities for information security, risk management, testing, and training, and authorizes NIST and NSA to provide guidance for security planning and implementation
- A. Computer Fraud and Abuse Act
- B. Government Information Security Reform Act (GISRA)
- C. Federal Information Security Management Act (FISMA)
- D. Computer Security Act
Answer: B
NEW QUESTION 12
Which of the following are the phases of the Certification and Accreditation (C&A) process Each correct answer represents a complete solution. Choose two.
- A. Auditing
- B. Initiation
- C. Continuous Monitoring
- D. Detection
Answer: BC
NEW QUESTION 13
Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls
- A. Certification and accreditation (C&A)
- B. Risk Management
- C. Information systems security engineering (ISSE)
- D. Information Assurance (IA)
Answer: A
NEW QUESTION 14
Which of the following security controls will you use for the deployment phase of the SDLC to build secure software Each correct answer represents a complete solution. Choose all that apply.
- A. Risk Adjustments
- B. Security Certification and Accreditation (C&A)
- C. Vulnerability Assessment and Penetration Testing
- D. Change and Configuration Control
Answer: ABC
NEW QUESTION 15
Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident
- A. Corrective controls
- B. Safeguards
- C. Detective controls
- D. Preventive controls
Answer: A
NEW QUESTION 16
Fill in the blank with an appropriate phrase. is used to verify and accredit systems by making a standard process, set of activities, general tasks, and management structure.
- A. DITSCAPNIACAP
Answer: A
NEW QUESTION 17
Which of the following types of CNSS issuances describes how to implement the policy or prescribes the manner of a policy
- A. Advisory memoranda
- B. Instructions
- C. Policies
- D. Directives
Answer: B
NEW QUESTION 18
Which of the following DoD policies establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels
- A. DoD 8500.1 Information Assurance (IA)
- B. DoD 8500.2 Information Assurance Implementation
- C. DoDI 5200.40
- D. DoD 8510.1-M DITSCAP
Answer: B
NEW QUESTION 19
Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system
- A. SSAA
- B. TCSEC
- C. FIPS
- D. FITSAF
Answer: B
NEW QUESTION 20
Which of the following refers to a process that is used for implementing information security
- A. Classic information security model
- B. Certification and Accreditation (C&A)
- C. Information Assurance (IA)
- D. Five Pillars model
Answer: B
P.S. Easily pass CISSP-ISSEP Exam with 213 Q&As 2passeasy Dumps & pdf Version, Welcome to Download the Newest 2passeasy CISSP-ISSEP Dumps: https://www.2passeasy.com/dumps/CISSP-ISSEP/ (213 New Questions)