Act now and download your today! Do not waste time for the worthless tutorials. Download with real questions and answers and begin to learn with a classic professional.
Free CISSP-ISSEP Demo Online For Microsoft Certifitcation:
NEW QUESTION 1
Which of the following documents were developed by NIST for conducting Certification & Accreditation (C&A) Each correct answer represents a complete solution. Choose all that apply.
- A. NIST Special Publication 800-59
- B. NIST Special Publication 800-60
- C. NIST Special Publication 800-37A
- D. NIST Special Publication 800-37
- E. NIST Special Publication 800-53
- F. NIST Special Publication 800-53A
Answer: ABDEF
NEW QUESTION 2
Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance for the security of national security systems
- A. National Security AgencyCentral Security Service (NSACSS)
- B. National Institute of Standards and Technology (NIST)
- C. United States Congress
- D. Committee on National Security Systems (CNSS)
Answer: D
NEW QUESTION 3
Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed
- A. Security Control Assessment Task 3
- B. Security Control Assessment Task 1
- C. Security Control Assessment Task 4
- D. Security Control Assessment Task 2
Answer: A
NEW QUESTION 4
FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high level potential impact
- A. The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.
- B. The loss of confidentiality, integrity, or availability might result in major financial losses.
- C. The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.
- D. The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.
Answer: ABCD
NEW QUESTION 5
Registration Task 5 identifies the system security requirements. Which of the following elements of Registration Task 5 defines the type of data processed by the system
- A. Data security requirement
- B. Network connection rule
- C. Applicable instruction or directive
- D. Security concept of operation
Answer: A
NEW QUESTION 6
Fill in the blank with an appropriate phrase. The helps the customer understand and document the information management needs that support the business or mission.
- A. systems engineer
Answer: A
NEW QUESTION 7
Which of the following elements are described by the functional requirements task Each correct answer represents a complete solution. Choose all that apply.
- A. Coverage
- B. Accuracy
- C. Quality
- D. Quantity
Answer: ACD
NEW QUESTION 8
Which of the following security controls is a set of layered security services that address communications and data security problems in the emerging Internet and intranet application space
- A. Internet Protocol Security (IPSec)
- B. Common data security architecture (CDSA)
- C. File encryptors
- D. Application program interface (API)
Answer: B
NEW QUESTION 9
Which of the following memorandums directs the Departments and Agencies to post clear privacy policies on World Wide Web sites, and provides guidance for doing it
- A. OMB M-99-18
- B. OMB M-00-13
- C. OMB M-03-19
- D. OMB M-00-07
Answer: A
NEW QUESTION 10
The Concept of Operations (CONOPS) is a document describing the characteristics of a proposed system from the viewpoint of an individual who will use that system. Which of the following points are included in CONOPS Each correct answer represents a complete solution. Choose all that apply.
- A. Strategies, tactics, policies, and constraints affecting the system
- B. Organizations, activities, and interactions among participants and stakeholders
- C. Statement of the structure of the system
- D. Clear statement of responsibilities and authorities delegated
- E. Statement of the goals and objectives of the system
Answer: ABDE
NEW QUESTION 11
Which of the following memorandums reminds the departments and agencies of the OMB principles for including and funding security as an element of agency information technology systems and architectures and of the decision criteria which is used to evaluate security for information systems investments
- A. OMB M-00-13
- B. OMB M-99-18
- C. OMB M-00-07
- D. OMB M-03-19
Answer: C
NEW QUESTION 12
Which of the following statements define the role of the ISSEP during the development of the detailed security design, as mentioned in the IATF document Each correct answer represents a complete solution. Choose all that apply.
- A. It identifies the information protection problems that needs to be solved.
- B. It allocates security mechanisms to system security design elements.
- C. It identifies custom security products.
- D. It identifies candidate commercial off-the-shelf (COTS)government off-the-shelf (GOTS) security products.
Answer: BCD
NEW QUESTION 13
Which of the following agencies provides command and control capabilities and enterprise infrastructure to continuously operate and assure a global net-centric enterprise in direct support to joint warfighters, National level leaders, and other mission and coalition partners
across the full spectrum of operations
- A. DARPA
- B. DTIC
- C. DISA
- D. DIAP
Answer: C
NEW QUESTION 14
Which of the following responsibilities are executed by the federal program manager
- A. Ensure justification of expenditures and investment in systems engineering activities.
- B. Coordinate activities to obtain funding.
- C. Review project deliverables.
- D. Review and approve project plans.
Answer: ABD
NEW QUESTION 15
Which of the following federal agencies coordinates, directs, and performs highly specialized activities to protect U.S. information systems and produces foreign intelligence information
- A. National Institute of Standards and Technology (NIST)
- B. National Security AgencyCentral Security Service (NSACSS)
- C. Committee on National Security Systems (CNSS)
- D. United States Congress
Answer: B
NEW QUESTION 16
Which of the following tools demands involvement by upper executives, in order to integrate quality into the business system and avoid delegation of quality functions to junior administrators
- A. ISO 90012000
- B. Benchmarking
- C. SEI-CMM
- D. Six Sigma
Answer: A
NEW QUESTION 17
Which of the following DITSCAPNIACAP model phases is used to confirm that the evolving system development and integration complies with the agreements between role players documented in the first phase
- A. Verification
- B. Validation
- C. Post accreditation
- D. Definition
Answer: A
NEW QUESTION 18
Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management
- A. Computer Misuse Act
- B. Clinger-Cohen Act
- C. ISG
- D. Lanham Act
Answer: C
NEW QUESTION 19
Which of the following acts assigns the Chief Information Officers (CIO) with the responsibility to develop Information Technology Architectures (ITAs) and is also referred to as the Information Technology Management Reform Act (ITMRA)
- A. Paperwork Reduction Act
- B. Computer Misuse Act
- C. Lanham Act
- D. Clinger Cohen Act
Answer: D
NEW QUESTION 20
Which of the following elements of Registration task 4 defines the operating system, database management system, and software applications, and how they will be used
- A. System firmware
- B. System interface
- C. System software
- D. System hardware
Answer: C
P.S. Easily pass CISSP-ISSEP Exam with 213 Q&As Surepassexam Dumps & pdf Version, Welcome to Download the Newest Surepassexam CISSP-ISSEP Dumps: https://www.surepassexam.com/CISSP-ISSEP-exam-dumps.html (213 New Questions)