Want to know features? Want to lear more about experience? Study . Gat a success with an absolute guarantee to pass ISC2 CISSP-ISSEP (Information Systems Security Engineering Professional) test on your first attempt.
Online ISC2 CISSP-ISSEP free dumps demo Below:
NEW QUESTION 1
Fill in the blank with an appropriate phrase. A is defined as any activity that has an effect on defining, designing, building, or executing a task, requirement, or procedure.
- A. technical effort
Answer: A
NEW QUESTION 2
Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed
- A. Security Control Assessment Task 3
- B. Security Control Assessment Task 1
- C. Security Control Assessment Task 4
- D. Security Control Assessment Task 2
Answer: A
NEW QUESTION 3
Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process
- A. Authorizing Official
- B. Information system owner
- C. Chief Information Officer (CIO)
- D. Chief Risk Officer (CRO)
Answer: B
NEW QUESTION 4
Which of the following is NOT used in the practice of Information Assurance (IA) to define assurance requirements
- A. Classic information security model
- B. Five Pillars model
- C. Communications Management Plan
- D. Parkerian Hexad
Answer: C
NEW QUESTION 5
Which of the following cooperative programs carried out by NIST provides a nationwide network of local centers offering technical and business assistance to small manufacturers
- A. NIST Laboratories
- B. Advanced Technology Program
- C. Manufacturing Extension Partnership
- D. Baldrige National Quality Program
Answer: C
NEW QUESTION 6
Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk responses for the risk event. The event is not likely to happen for several months but the probability of the event is high. Which one of the following is a valid response to the identified risk event
- A. Earned value management
- B. Risk audit
- C. Corrective action
- D. Technical performance measurement
Answer: C
NEW QUESTION 7
You work as a security engineer for BlueWell Inc. According to you, which of the following statements determines the main focus of the ISSE process
- A. Design information systems that will meet the certification and accreditation documentation.
- B. Identify the information protection needs.
- C. Ensure information systems are designed and developed with functional relevance.
- D. Instruct systems engineers on availability, integrity, and confidentiality.
Answer: B
NEW QUESTION 8
Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system
- A. System Owner
- B. Information Systems Security Officer (ISSO)
- C. Designated Approving Authority (DAA)
- D. Chief Information Security Officer (CISO)
Answer: C
NEW QUESTION 9
Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance for the security of national security systems
- A. National Security AgencyCentral Security Service (NSACSS)
- B. National Institute of Standards and Technology (NIST)
- C. United States Congress
- D. Committee on National Security Systems (CNSS)
Answer: D
NEW QUESTION 10
The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation. What are the process activities of this phase Each correct answer represents a complete solution. Choose all that apply.
- A. Assessment of the Analysis Results
- B. Certification analysis
- C. Registration
- D. System development
- E. Configuring refinement of the SSAA
Answer: ABDE
NEW QUESTION 11
Stella works as a system engineer for BlueWell Inc. She wants to identify the performance thresholds of each build. Which of the following tests will help Stella to achieve her task
- A. Regression test
- B. Reliability test
- C. Functional test
- D. Performance test
Answer: D
NEW QUESTION 12
Which of the following protocols is used to establish a secure terminal to a remote network device
- A. WEP
- B. SMTP
- C. SSH
- D. IPSec
Answer: C
NEW QUESTION 13
Which of the following guidelines is recommended for engineering, protecting, managing, processing, and controlling national security and sensitive (although unclassified) information
- A. Federal Information Processing Standard (FIPS)
- B. Special Publication (SP)
- C. NISTIRs (Internal Reports)
- D. DIACAP by the United States Department of Defense (DoD)
Answer: B
NEW QUESTION 14
Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process
- A. Chief Information Officer
- B. Authorizing Official
- C. Common Control Provider
- D. Senior Agency Information Security Officer
Answer: C
NEW QUESTION 15
Which of the following CNSS policies describes the national policy on controlled access protection
- A. NSTISSP N
- B. 101
- C. NSTISSP N
- D. 200
- E. NCSC N
- F. 5
- G. CNSSP N
- H. 14
Answer: B
NEW QUESTION 16
Which of the following individuals is responsible for monitoring the information system
environment for factors that can negatively impact the security of the system and its accreditation
- A. Chief Information Officer
- B. Chief Information Security Officer
- C. Chief Risk Officer
- D. Information System Owner
Answer: D
NEW QUESTION 17
What are the responsibilities of a system owner Each correct answer represents a complete solution. Choose all that apply.
- A. Integrates security considerations into application and system purchasing decisions and development projects.
- B. Ensures that the necessary security controls are in place.
- C. Ensures that adequate security is being provided by the necessary controls, password management, remote access controls, operating system configurations, and so on.
- D. Ensures that the systems are properly assessed for vulnerabilities and must report any to the incident response team and data owner.
Answer: ACD
NEW QUESTION 18
Diane is the project manager of the HGF Project. A risk that has been identified and analyzed in the project planning processes is now coming into fruition. What individual should respond to the risk with the preplanned risk response
- A. Project sponsor
- B. Risk owner
- C. Diane
- D. Subject matter expert
Answer: B
NEW QUESTION 19
The principle of the SEMP is not to repeat the information, but rather to ensure that there are processes in place to conduct those functions. Which of the following sections of the SEMP template describes the work authorization procedures as well as change management approval processes
- A. Section 3.1.8
- B. Section 3.1.9
- C. Section 3.1.5
- D. Section 3.1.7
Answer: B
NEW QUESTION 20
Which of the following DoD directives is referred to as the Defense Automation Resources Management Manual
- A. DoD 8910.1
- B. DoD 7950.1-M
- C. DoD 5200.22-M
- D. DoD 5200.1-R
- E. DoDD 8000.1
Answer: B
Recommend!! Get the Full CISSP-ISSEP dumps in VCE and PDF From prep-labs.com, Welcome to Download: https://www.prep-labs.com/dumps/CISSP-ISSEP/ (New 213 Q&As Version)