ISSEP ISSEP Information Systems Security Engineering Professional Questions and Answers

Della works as a systems engineer for BlueWell Inc. She wants to convert system requirements into a comprehensive function standard, and break the higher-level functions into lower-level functions. Which of the following processes will Della use to accomplish the task

Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls

You work as a security engineer for BlueWell Inc. According to you, which of the following statements determines the main focus of the ISSE process

Which of the following configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available

Which of the following individuals is responsible for monitoring the information system environment for factors that can negatively impact the security of the system and its accreditation

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD Each correct answer represents a complete solution. Choose all that apply.

Which of the following is used to indicate that the software has met a defined quality level and is ready for mass distribution either by electronic means or by physical media

Which of the following security controls will you use for the deployment phase of the SDLC to build secure software Each correct answer represents a complete solution. Choose all that apply.

You work as a system engineer for BlueWell Inc. Which of the following documents will help you to describe the detailed plans, procedures, and schedules to guide the transition process

Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed

Which of the following memorandums reminds the Federal agencies that it is required by law and policy to establish clear privacy policies for Web activities and to comply with those policies

Which of the following laws is the first to implement penalties for the creator of viruses, worms, and other types of malicious code that causes harm to the computer systems

Which of the following NIST Special Publication documents provides a guideline on network security testing

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process Each correct answer represents a complete solution. Choose all that apply.

A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies Each correct answer represents a complete solution. Choose all that apply.

Which of the following are the major tasks of risk management Each correct answer represents a complete solution. Choose two.

Which of the following refers to a process that is used for implementing information security

Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package

John works as a security engineer for BlueWell Inc. He wants to identify the different functions that the system will need to perform to meet the documented missionbusiness needs. Which of the following processes will John use to achieve the task

Which of the following protocols is used to establish a secure terminal to a remote network device

Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management

Choose and reorder the steps to built the system security architectures in accordance with the DoDAF.

Under which of the following CNSS policies, NIACAP is mandatory for all the systems that process USG classified information

Drag and drop the correct DoD Policy Series at their appropriate places.

Which of the following CNSS policies describes the national policy on use of cryptomaterial by activities operating in high risk environments

Which of the following certification levels requires the completion of the minimum security checklist and more in-depth, independent analysis

Fill in the blank with an appropriate phrase. A ____________________ is defined as any activity that has an effect on defining, designing, building, or executing a task, requirement, or procedure.

There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event

Which of the following is NOT an objective of the security program