Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the following are the U.S. Federal Government information security standards Each correct answer represents a complete solution. Choose all that apply.

CA Certification, Accreditation, and Security Assessments

SA System and Services Acquisition

CA Certification, Accreditation, and Security Assessments

Information systems acquisition, development, and maintenance

SA System and Services Acquisition

Which of the following is the acronym of RTM

Requirements Traceability Matrix

Which of the following individuals is responsible for monitoring the information system environment for factors that can negatively impact the security of the system and its accreditation

Chief Information Security Officer

Which of the following is the application of statistical methods to the monitoring and control of a process to ensure that it operates at its full potential to produce conforming product

Statistical process control (SPC)

Information Protection Policy (IPP)

Information management model (IMM)

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3 Each correct answer represents a complete solution. Choose all that apply.

Agree on a strategy to mitigate risks.

Evaluate mitigation progress and plan next assessment.

Document and implement a mitigation plan.

Agree on a strategy to mitigate risks.

Evaluate mitigation progress and plan next assessment.

Identify threats, vulnerabilities, and controls that will be evaluated.

Document and implement a mitigation plan.

An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing Official Each correct answer represents a complete solution.Choose all that apply.

Ascertaining the security posture of the organization's information system

Reviewing security status reports and critical security documents

Determining the requirement of reauthorization and reauthorizing information systems when required

Ascertaining the security posture of the organization's information system

Reviewing security status reports and critical security documents

Determining the requirement of reauthorization and reauthorizing information systems when required

Establishing and implementing the organization's continuous monitoring program

Which of the following federal agencies coordinates, directs, and performs highly specialized activities to protect U.S. information systems and produces foreign intelligence information

National Security AgencyCentral Security Service (NSACSS)

National Institute of Standards and Technology (NIST)

National Security AgencyCentral Security Service (NSACSS)

Committee on National Security Systems (CNSS)

You work as a systems engineer for BlueWell Inc. You want to protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. Which of the following processes will you use to accomplish the task

Information Systems Security Engineering (ISSE)

Which of the following terms describes the measures that protect and support information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation

Information Systems Security Engineering (ISSE)

Information Protection Policy (IPP)

Information systems security (InfoSec)

Which of the following is an Information Assurance (IA) model that protects and defends information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation

Capability Maturity Model (CMM)

Classic information security model

You work as an ISSE for BlueWell Inc. You want to break down user roles, processes, and information until ambiguity is reduced to a satisfactory degree. Which of the following tools will help you to perform the above task

Information Management Model (IMM)

FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high level potential impact

The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.

The loss of confidentiality, integrity, or availability might result in major financial losses.

The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.

The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.

The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.

The loss of confidentiality, integrity, or availability might result in major financial losses.

The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.

The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.

Which of the following individuals are part of the senior management and are responsible for authorization of individual systems, approving enterprise solutions, establishing security policies, providing funds, and maintaining an understanding of risks at all levels Each correct answer represents a complete solution.Choose all that apply.

Senior Information Security Officer

Which of the following laws is the first to implement penalties for the creator of viruses, worms, and other types of malicious code that causes harm to the computer systems

Digital Millennium Copyright Act

ISC CISSP-ISSEP Practice Test 5 - Free Online Exam Prep & Questions

Which of the following individuals reviews and approves project deliverables from a QA perspective

Become a Premium Member for full access

Unlock Premium Member

ISC CISSP-ISSEP Practice Test 5

Question

ISC CISSP-ISSEP Practice Tests

Practice Tests