CISSP-ISSEP Practice Questions

The Concept of Operations (CONOPS) is a document describing the characteristics of a proposed system from the viewpoint of an individual who will use that system. Which of the foll...

Which of the following processes describes the elements such as quantity, quality, coverage, timelines, and availability, and categorizes the different functions that the system wi...

Which of the following DoD policies establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels?

Fill in the blank with an appropriate phrase. _________________ is used to verify and accredit systems by making a standard process, set of activities, general tasks, and managemen...

Fill in the blank with an appropriate phrase. The ______________ process is used for allocating performance and designing the requirements to each function.

Which of the following tasks describes the processes required to ensure that the project includes all the work required, and only the work required, to complete the project success...

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the diffe...

Which of the following CNSS policies describes the national policy on securing voice ?communications

Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package?

Which of the following are the phases of the Certification and Accreditation (C&A) process? Each correct answer represents a complete solution. Choose two.

Which of the following DITSCAPNIACAP model phases is used to confirm that the evolving system development and integration complies with the agreements between role players document...

Which of the following are the ways of sending secure e-mail messages over the Internet? Each correct answer represents a complete solution. Choose two.

Which of the following memorandums directs the Departments and Agencies to post clear privacy policies on World Wide Web sites, and provides guidance for doing it?

Which of the following categories of system specification describes the technical, performance, operational, maintenance, and support characteristics for the entire system?

You have been tasked with finding an encryption methodology that will encrypt most types of email attachments. The requirements are that your solution must use the RSA algorithm. W...

Which of the following security controls works as the totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of whi...

A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. Which of the following are required...

Which of the following organizations assists the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies?

Which of the following describes a residual risk as the risk remaining after a risk mitigation has occurred?

Della works as a systems engineer for BlueWell Inc. She wants to convert system requirements into a comprehensive function standard, and break the higher-level functions into lower...

Fill in the blanks with an appropriate phrase. The______________ is the process of translating system requirements into detailed function criteri a.

Which of the CNSS policies describes the national policy on certification and accreditation of national security telecommunications and information systems?

Which of the following cooperative programs carried out by NIST speed ups the development of modern technologies for broad, national benefit by co-funding research and development...

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series? Each correct answer rep...

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, un...

Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that appl...

The functional analysis process is used for translating system requirements into detailed function criteria. Which of the following are the elements of functional analysis process?...

Which of the following acts is endorsed to provide a clear statement of the proscribed activity concerning computers to the law enforcement community, those who own and operate com...

In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47 does the participating organizations perform the following tasks Perform preliminary...

Which of the following DITSCAP phases validates that the preceding work has produced an IS that operates in a specified computing environment?

Which of the following terms describes the security of an information system against unauthorized access to or modification of information, whether in storage, processing, or trans...

Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk r...

Which of the following CNSS policies describes the national policy on use of cryptomaterial by activities operating in high risk environments?

Which of the following sections of the SEMP template defines the project constraints, to include constraints on funding, personnel, facilities, manufacturing capability and capacit...

Which of the following certification levels requires the completion of the minimum security checklist and more in-depth, independent analysis?

Which of the following individuals reviews and approves project deliverables from a QA perspective?

Which of the following memorandums reminds the departments and agencies of the OMB principles for including and funding security as an element of agency information technology syst...

Which of the following NIST Special Publication documents provides a guideline on questionnaires and checklists through which systems can be evaluated for compliance against specif...

Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security cont...

Which of the following is the acronym of RTM?

Which of the following individuals is responsible for monitoring the information system environment for factors that can negatively impact the security of the system and its accred...

Which of the following is the application of statistical methods to the monitoring and control of a process to ensure that it operates at its full potential to produce conforming p...

Which of the following DoD directives is referred to as the Defense Automation Resources Management Manual?

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3? Each correct answer represents a...

Which of the following elements of Registration task 4 defines the operating system, database management system, and software applications, and how they will be used?

Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the inf...

Which of the following types of CNSS issuances establishes or describes policy and programs, provides authority, or assigns responsibilities?

Which of the following are the subtasks of the Define Life-Cycle Process Concepts task? Each correct answer represents a complete solution. Choose all that apply.

You work as a systems engineer for BlueWell Inc. You want to protect and defend information and information systems by ensuring their availability, integrity, authentication, confi...

Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident?