File Info
| Exam | Information Systems Security Engineering Professional |
| Number | CISSP-ISSEP |
| File Name | ISC.CISSP-ISSEP.SelfTestEngine.2018-11-27.118q.vcex |
| Size | 78 KB |
| Posted | Nov 27, 2018 |
| Download | ISC.CISSP-ISSEP.SelfTestEngine.2018-11-27.118q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following tasks obtains the customer agreement in planning the technical effort
- Task 9
- Task 11
- Task 8
- Task 10
Correct answer: B
Question 2
Which of the following documents were developed by NIST for conducting Certification & Accreditation (C&A) Each correct answer represents a complete solution.
Choose all that apply.
- NIST Special Publication 800-59
- NIST Special Publication 800-60
- NIST Special Publication 800-37A
- NIST Special Publication 800-37
- NIST Special Publication 800-53
- NIST Special Publication 800-53A
Correct answer: ABDEF
Explanation:
Question 3
Which of the following elements are described by the functional requirements task Each correct answer represents a complete solution. Choose all that apply.
- Coverage
- Accuracy
- Quality
- Quantity
Correct answer: ACD
Question 4
Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality
- Information Protection Policy (IPP)
- IMM
- System Security Context
- CONOPS
Correct answer: A
Question 5
What are the responsibilities of a system owner Each correct answer represents a complete solution. Choose all that apply.
- Integrates security considerations into application and system purchasing decisions and development projects.
- Ensures that the necessary security controls are in place.
- Ensures that adequate security is being provided by the necessary controls, password management, remote access controls, operating system configurations, and so on.
- Ensures that the systems are properly assessed for vulnerabilities and must report any to the incident response team and data owner.
Correct answer: ACD
Question 6
Which of the following Registration Tasks sets up the business or operational functional description and system identification
- Registration Task 2
- Registration Task 1
- Registration Task 3
- Registration Task 4
Correct answer: B
Question 7
Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance for the security of national security systems
- National Security AgencyCentral Security Service (NSACSS)
- National Institute of Standards and Technology (NIST)
- United States Congress
- Committee on National Security Systems (CNSS)
Correct answer: D
Explanation:
Question 8
Which of the following statements is true about residual risks
- It can be considered as an indicator of threats coupled with vulnerability.
- It is a weakness or lack of safeguard that can be exploited by a threat.
- It is the probabilistic risk after implementing all security measures.
- It is the probabilistic risk before implementing all security measures.
Correct answer: C
Question 9
According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD Each correct answer represents a complete solution. Choose all that apply.
- DC Security Design & Configuration
- EC Enclave and Computing Environment
- VI Vulnerability and Incident Management
- Information systems acquisition, development, and maintenance
Correct answer: ABC
Explanation:
Question 10
Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation Each correct answer represents a complete solution. Choose two.
- Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
- Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
- Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
- Certification is the official management decision given by a senior agency official to authorize operation of an information system.
Correct answer: BC
