CISSP-ISSEP Exam Questions

Which of the following Security Control Assessment Tasks gathers the documentation and supporting materials essential for the assessment of the security controls in the information...

Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process?

Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls?

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing s...

Which of the following protocols is built in the Web server and browser to encrypt data traveling over the Internet?

Which of the following configuration management system processes defines which items will be configuration managed, how they are to be identified, and how they are to be documented...

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

You work as a security engineer for BlueWell Inc. Which of the following documents will you use as a guide for the security certification and accreditation of Federal Information S...

Which of the following documents is described in the statement below It is developed along with all processes of the risk management. It contains the results of the qualitative ris...

Diane is the project manager of the HGF Project. A risk that has been identified and analyzed in the project planning processes is now coming into fruition. What individual should...

Which of the following refers to a process that is used for implementing information security?

In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47, do the organizations build and execute a plan for establishing the interconnection,...

Which of the following tools demands involvement by upper executives, in order to integrate quality into the business system and avoid delegation of quality functions to junior adm...

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

Which of the following statements define the role of the ISSEP during the development of the detailed security design, as mentioned in the IATF document? Each correct answer repres...

Which of the following individuals is responsible for the oversight of a program that is supported by a team of people that consists of, or be exclusively comprised of contractors?

Which of the following agencies serves the DoD community as the largest central resource for DoD and government-funded scientific, technical, engineering, and business related info...

You work as a system engineer for BlueWell Inc. You want to verify that the build meets its data requirements, and correctly generates each expected display and report. Which of th...

You work as a system engineer for BlueWell Inc. Which of the following documents will help you to describe the detailed plans, procedures, and schedules to guide the transition pro...

Which of the following policies describes the national policy on the secure electronic messaging service?

The PRIMARY characteristic of a Distributed Denial of Service (DDoS) attack is that it

During a fingerprint verification process, which of the following is used to verify identity and authentication?

Which of the following prevents improper aggregation of privileges in Role Based Access Control (RBAC)?

Which of the following is required to determine classification and ownership?

Which of the following describes the BEST configuration management practice?

What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process? Each correct answer represents a complete solution. Choose all that ap...

Which of the following memorandums reminds the Federal agencies that it is required by law and policy to establish clear privacy policies for Web activities and to comply with thos...

Lisa is the project manager of the SQL project for her company. She has completed the risk response planning with her project team and is now ready to update the risk register to r...

You work as a security manager for BlueWell Inc. You are going through the NIST SP 800-37 C&A methodology, which is based on four well defined phases. In which of the following pha...

You work as a systems engineer for BlueWell Inc. You are working on translating system requirements into detailed function criteria. Which of the following diagrams will help you t...

Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for add...

Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques a...

The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation. What are the process...

You work as a Network Administrator for PassGuide Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recomme...

Which of the following processes illustrate the study of a technical nature of interest to focused audience, and consist of interim or final reports on work made by NIST for extern...

Fill in the blank with an appropriate phrase. __________ seeks to improve the quality of process outputs by identifying and removing the causes of defects and variability in manufa...

You work as a security engineer for BlueWell Inc. You are working on the ISSE model. In which of the following phases of the ISSE model is the system defined in terms of what secur...

TQM recognizes that quality of all the processes within an organization contribute to the quality of the product. Which of the following are the most important activities in the To...

Fill in the blank with the appropriate phrase. The ____________ is the risk that remains after the implementation of new or enhanced controls.

Which of the following is designed to detect unwanted attempts at accessing, manipulating, and disabling of computer systems through the Internet?

Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection mechanism?

Which of the following DoD policies provides assistance on how to implement policy, assign responsibilities, and prescribe procedures for applying integrated, layered protection of...

Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completen...

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statem...

For interactive and self-paced preparation of exam ISSEP, try our practice exams. Practice exams also include self assessment and reporting features! Fill in the blank with an appr...

Which of the following configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available?

Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?

Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacki...

Which of the following responsibilities are executed by the federal program manager?

Which of the following approaches can be used to build a security program? Each correct answer represents a complete solution. Choose all that apply.