CISSP-ISSEP Exam Questions

Which of the following email lists is written for the technical audiences, and provides weekly summaries of security issues, new vulnerabilities, potential impact, patches and work...

Which of the following tasks obtains the customer agreement in planning the technical effort?

Which of the following documents were developed by NIST for conducting Certification & Accreditation (C&A)? Each correct answer represents a complete solution. Choose all that appl...

Which of the following elements are described by the functional requirements task? Each correct answer represents a complete solution. Choose all that apply.

Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality?

DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels. Which of the following MAC levels require...

What are the responsibilities of a system owner? Each correct answer represents a complete solution. Choose all that apply.

Which of the following Registration Tasks sets up the business or operational functional description and system identification?

Fill in the blank with an appropriate section name. _________________ is a section of the SEMP template, which specifies the methods and reasoning planned to build the requisite tr...

Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance...

Which of the following statements is true about residual risks?

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the fo...

Which of the following CNSS policies describes the national policy on controlled access protection?

Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management?

Which of the following principles are defined by the IATF model? Each correct answer represents a complete solution. Choose all that apply.

Which of the following cooperative programs carried out by NIST conducts research to advance the nation's technology infrastructure?

Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?

Which of the following assessment methodologies defines a six-step technical security evaluation?

What is the MOST critical factor to achieve the goals of a security program?

Which of the following is an attacker MOST likely to target to gain privileged access to a system?