nerdexam
(ISC)2

CISSP-ISSEP · Question #12

In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47, do the organizations build and execute a plan for establishing the interconnection, including executing

The correct answer is A. Establishing the interconnection. Establishing the interconnection (Option A) is correct because this is the execution phase - organizations take the approved plan and actually implement it by configuring systems, applying security controls, and activating the connection. It's the "build and do" phase, not the "t

Systems Development and Acquisition

Question

In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47, do the organizations build and execute a plan for establishing the interconnection, including executing or configuring appropriate security controls?

Options

  • AEstablishing the interconnection
  • BPlanning the interconnection
  • CDisconnecting the interconnection
  • DMaintaining the interconnection

How the community answered

(20 responses)
  • A
    95% (19)
  • D
    5% (1)

Explanation

Establishing the interconnection (Option A) is correct because this is the execution phase - organizations take the approved plan and actually implement it by configuring systems, applying security controls, and activating the connection. It's the "build and do" phase, not the "think and plan" phase.

  • B (Planning) is wrong because planning comes before establishing - it's where organizations analyze requirements, assess risks, and draft the Interconnection Security Agreement (ISA), but no actual configuration or execution happens yet.
  • C (Disconnecting) is wrong because that phase covers terminating an existing interconnection, which is the opposite of building one.
  • D (Maintaining) is wrong because maintenance occurs after the connection is live - it covers ongoing monitoring, reviews, and keeping security controls current.

Memory tip: Think of it like building a house - Planning is the blueprint stage, Establishing is when construction crews show up and actually build it (execute the plan, configure the controls), Maintaining is ongoing upkeep, and Disconnecting is demolition. The word "build and execute" in the question maps directly to Establish.

Topics

#NIST SP 800-47#Interconnection life cycle#Security controls implementation#Network security

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice