Printable CISSP-ISSEP Exam Questions and Answers 2021

NEW QUESTION 1
Which of the following memorandums reminds the departments and agencies of the OMB principles for including and funding security as an element of agency information technology systems and architectures and of the decision criteria which is used to evaluate security for information systems investments

• A. OMB M-00-13
• B. OMB M-99-18
• C. OMB M-00-07
• D. OMB M-03-19

Answer: C

NEW QUESTION 2
Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States

• A. Lanham Act
• B. FISMA
• C. Computer Fraud and Abuse Act
• D. Computer Misuse Act

Answer: B

NEW QUESTION 3
Which of the following protocols is built in the Web server and browser to encrypt data traveling over the Internet

• A. UDP
• B. SSL
• C. IPSec
• D. HTTP

Answer: B

NEW QUESTION 4
Fill in the blank with an appropriate section name. is a section of the SEMP template, which specifies the methods and reasoning planned to build the requisite trade-offs between functionality, performance, cost, and risk.

• A. System Analysis

Answer: A

NEW QUESTION 5
Which of the following Registration Tasks sets up the system architecture description, and describes the C&A boundary

• A. Registration Task 3
• B. Registration Task 4
• C. Registration Task 2
• D. Registration Task 1

Answer: B

NEW QUESTION 6
Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the security posture of a system or site

• A. ASSET
• B. NSA-IAM
• C. NIACAP
• D. DITSCAP

Answer: C

NEW QUESTION 7
Which of the following DoD policies provides assistance on how to implement policy,
assign responsibilities, and prescribe procedures for applying integrated, layered protection of the DoD information systems and networks

• A. DoD 8500.1 Information Assurance (IA)
• B. DoDI 5200.40
• C. DoD 8510.1-M DITSCAP
• D. DoD 8500.2 Information Assurance Implementation

Answer: D

NEW QUESTION 8
Della works as a systems engineer for BlueWell Inc. She wants to convert system requirements into a comprehensive function standard, and break the higher-level functions into lower-level functions. Which of the following processes will Della use to accomplish the task

• A. Risk analysis
• B. Functional allocation
• C. Functional analysis
• D. Functional baseline

Answer: C

NEW QUESTION 9
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls are tested and reviewed

• A. Level 4
• B. Level 5
• C. Level 1
• D. Level 2
• E. Level 3

Answer: A

NEW QUESTION 10
Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completeness of the relationship

• A. FIPS 200
• B. NIST SP 800-50
• C. Traceability matrix
• D. FIPS 199

Answer: C

NEW QUESTION 11
You work as a Network Administrator for PassGuide Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recommend for providing security

• A. HTTP
• B. VPN
• C. SMIME
• D. SSL

Answer: D

NEW QUESTION 12
Which of the following responsibilities are executed by the federal program manager

• A. Ensure justification of expenditures and investment in systems engineering activities.
• B. Coordinate activities to obtain funding.
• C. Review project deliverables.
• D. Review and approve project plans.

Answer: ABD

NEW QUESTION 13
Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management

• A. Computer Misuse Act
• B. Clinger-Cohen Act
• C. ISG
• D. Lanham Act

Answer: C

NEW QUESTION 14
Which of the following is a type of security management for computers and networks in order to identify security breaches

• A. IPS
• B. IDS
• C. ASA
• D. EAP

Answer: B

NEW QUESTION 15
You are working as a project manager in your organization. You are nearing the final stages of project execution and looking towards the final risk monitoring and controlling activities. For your project archives, which one of the following is an output of risk monitoring and control

• A. Quantitative risk analysis
• B. Risk audits
• C. Requested changes
• D. Qualitative risk analysis

Answer: C

NEW QUESTION 16
Which of the following tasks prepares the technical management plan in planning the technical effort

• A. Task 10
• B. Task 9
• C. Task 7
• D. Task 8

Answer: B

NEW QUESTION 17
Which of the CNSS policies describes the national policy on certification and accreditation of national security telecommunications and information systems

• A. NSTISSP N
• B. 7
• C. NSTISSP N
• D. 11
• E. NSTISSP N
• F. 6
• G. NSTISSP N
• H. 101

Answer: C

NEW QUESTION 18
You have been tasked with finding an encryption methodology that will encrypt most types of email attachments. The requirements are that your solution must use the RSA algorithm. Which of the following is your best choice

• A. PGP
• B. SMIME
• C. DES
• D. Blowfish

Answer: B

NEW QUESTION 19
Fill in the blank with the appropriate phrase. The is the risk that remains after the implementation of new or enhanced controls.

• A. residual risk

Answer: A

NEW QUESTION 20
You work as a system engineer for BlueWell Inc. You want to verify that the build meets its data requirements, and correctly generates each expected display and report. Which of the following tests will help you to perform the above task

• A. Functional test
• B. Reliability test
• C. Performance test
• D. Regression test

Answer: A