CISSP-ISSEP Online Practice Questions and Answers

Which of the following policies describes the national policy on the secure electronic messaging service

A. NSTISSP No. 11

B. NSTISSP No. 7

C. NSTISSP No. 6

D. NSTISSP No. 101

You work as a security manager for BlueWell Inc. You are going through the NIST SP 800-37 CandA methodology, which is based on four well defined phases. In which of the following phases of NIST SP 800-37 CandA methodology does the security categorization occur

A. Continuous Monitoring

B. Initiation

C. Security Certification

D. Security Accreditation

You work as a security engineer for BlueWell Inc. According to you, which of the following statements determines the main focus of the ISSE process

A. Design information systems that will meet the certification and accreditation documentation.

B. Identify the information protection needs.

C. Ensure information systems are designed and developed with functional relevance.

D. Instruct systems engineers on availability, integrity, and confidentiality.

The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer Each correct answer represents a complete solution. Choose all that apply.

A. Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan

B. Preserving high-level communications and working group relationships in an organization

C. Establishing effective continuous monitoring program for the organization

D. Facilitating the sharing of security risk-related information among authorizing officials

Which of the following acts assigns the Chief Information Officers (CIO) with the responsibility to develop Information Technology Architectures (ITAs) and is also referred to as the Information Technology Management Reform Act (ITMRA)

A. Paperwork Reduction Act

B. Computer Misuse Act

C. Lanham Act

D. Clinger Cohen Act

Which of the following categories of system specification describes the technical, performance, operational, maintenance, and support characteristics for the entire system

A. Process specification

B. Product specification

C. Development specification

D. System specification

You work as a systems engineer for BlueWell Inc. You want to communicate the quantitative and qualitative system characteristics to all stakeholders. Which of the following documents will you use to achieve the above task

A. IMM

B. CONOPS

C. IPP

D. System Security Context

Which of the following CNSS policies describes the national policy on controlled access protection?

A. NSTISSP No. 101

B. NSTISSP No. 200

C. NCSC No. 5

D. CNSSP No. 14