nerdexam
(ISC)2

CISSP-ISSEP · Question #124

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series? Each correct answer represents a complete s

The correct answer is B. Providing command and control and situational awareness C. Defending systems D. Protecting information. DoD 8500 establishes the overarching information assurance (IA) strategy with three core objectives: providing command and control and situational awareness of the IA posture (B), defending systems against threats to availability, integrity, and confidentiality (C), and protectin

Governance and Training

Question

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AProviding IA Certification and Accreditation
  • BProviding command and control and situational awareness
  • CDefending systems
  • DProtecting information

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    94% (31)

Explanation

DoD 8500 establishes the overarching information assurance (IA) strategy with three core objectives: providing command and control and situational awareness of the IA posture (B), defending systems against threats to availability, integrity, and confidentiality (C), and protecting information throughout its lifecycle (D). These three pillars together form the strategic foundation of the DoD's IA framework.

Why A is wrong: Certification and Accreditation (C&A) is addressed by DoD 8510 (DIACAP), not 8500. The 8500 series sets the high-level policy goals; 8510 defines the process for certifying and accrediting systems to meet those goals. Confusing these two is the classic exam trap.

Memory tip: Think of 8500 as the "What we protect and why" policy - protect information, defend systems, and maintain awareness/control. Think of 8510 as the "How we prove it" process (C&A). If an answer choice sounds like a process or mechanism rather than a strategic objective, it likely belongs to 8510, not 8500.

Topics

#DoD 8500#Information Assurance (IA)#Security Objectives#Policy Frameworks

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice