You work as a system engineer for BlueWell Inc. Which of the following documents will help you to describe the detailed plans, procedures, and schedules to guide the transition process

Systems engineering management plan (SEMP)

Which of the following principles are defined by the IATF model Each correct answer represents a complete solution. Choose all that apply.

The problem space is defined by the customer's mission or business needs.

The systems engineer and information systems security engineer define the solution space, which is driven by the problem space.

Always keep the problem and solution spaces separate.

The degree to which the security of the system, as it is defined, designed, and implemented, meets the security needs.

The problem space is defined by the customer's mission or business needs.

The systems engineer and information systems security engineer define the solution space, which is driven by the problem space.

Always keep the problem and solution spaces separate.

Which of the following cooperative programs carried out by NIST conducts research to advance the nation's technology infrastructure

Manufacturing Extension Partnership

Baldrige National Quality Program

Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system

Designated Approving Authority (DAA)

Information Systems Security Officer (ISSO)

Designated Approving Authority (DAA)

Chief Information Security Officer (CISO)

What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process Each correct answer represents a complete solution. Choose all that apply.

Combine validation results in DIACAP scorecard.

Execute and update IA implementation plan.

Conduct activities related to the disposition of the system data and objects.

Combine validation results in DIACAP scorecard.

Execute and update IA implementation plan.

Lisa is the project manager of the SQL project for her company. She has completed the risk response planning with her project team and is now ready to update the risk register to reflect the risk response. Which of the following statements best describes the level of detail Lisa should include with the risk responses she has created

The level of detail should correspond with the priority ranking.

The level of detail must define exactly the risk response for each identified risk.

The level of detail is set of project risk governance.

The level of detail is set by historical information.

The level of detail should correspond with the priority ranking.

You work as a systems engineer for BlueWell Inc. You are working on translating system requirements into detailed function criteria. Which of the following diagrams will help you to show all of the function requirements and their groupings in one diagram

Functional flow block diagram (FFBD)

Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle

Phase 4, Post Accreditation Phase

Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed

Security Control Assessment Task 3

Security Control Assessment Task 1

Security Control Assessment Task 4

Security Control Assessment Task 2

The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation.What are the process activities of this phase Each correct answer represents a complete solution. Choose all that apply.

Assessment of the Analysis Results

Configuring refinement of the SSAA

Assessment of the Analysis Results

Configuring refinement of the SSAA

Which of the following processes illustrate the study of a technical nature of interest to focused audience, and consist of interim or final reports on work made byNIST for external sponsors, including government and non-government sponsors

Federal Information Processing Standards (FIPS)

You work as a security engineer for BlueWell Inc. You are working on the ISSE model. In which of the following phases of the ISSE model is the system defined in terms of what security is needed

Define system security requirements

Define system security architecture

Develop detailed security design

Discover information protection needs

Define system security requirements

Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection mechanism

Internet Protocol Security (IPSec)

Internet Key Exchange (IKE) Protocol

Internet Protocol Security (IPSec)

Which of the following DoD policies provides assistance on how to implement policy, assign responsibilities, and prescribe procedures for applying integrated, layered protection of the DoD information systems and networks

DoD 8500.2 Information Assurance Implementation

DoD 8500.1 Information Assurance (IA)

DoD 8500.2 Information Assurance Implementation

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about ISSO and ISSE Each correct answer represents a complete solution. Choose all that apply.

An ISSE provides advice on the impacts of system changes.

An ISSE provides advice on the continuous monitoring of the information system.

An ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A).

An ISSE manages the security of the information system that is slated for Certification & Accreditation (C&A).

An ISSE provides advice on the impacts of system changes.

An ISSE provides advice on the continuous monitoring of the information system.

An ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A).

An ISSO takes part in the development activities that are required to implement system changes.

Which of the following configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available

Configuration Status and Accounting

Configuration Verification and Audit

Configuration Status and Accounting

Which of the following responsibilities are executed by the federal program manager

Ensure justification of expenditures and investment in systems engineering activities.

Coordinate activities to obtain funding.

Review and approve project plans.

Ensure justification of expenditures and investment in systems engineering activities.

Coordinate activities to obtain funding.

Review and approve project plans.

ISC CISSP-ISSEP Practice Test 2 - Free Online Exam Prep & Questions

Which of the following agencies serves the DoD community as the largest central resource for DoD and government-funded scientific, technical, engineering, and business related information available today

DISA

DIAP

DTIC

DARPA

Comment (0)

ISC CISSP-ISSEP Practice Test 2

Question

ISC CISSP-ISSEP Practice Tests

Practice Tests