ISSEP ISC2 Exam Questions and Free Practice Test

Question 31

Which of the following are the benefits of SE as stated by MIL-STD-499B Each correct answer represents a complete solution. Choose all that apply.

A. It develops work breakdown structures and statements of work.

B. It establishes and maintains configuration management of the system.

C. It develops needed user training equipment, procedures, and data.

D. It provides high-quality products and services, with the correct people and performance features, at an affordable price, and on time.

Correct Answer:ABC

Question 32

Which of the following DITSCAPNIACAP model phases is used to show the required evidence to support the DAA in accreditation process and conclude in an Approval To Operate (ATO)

A. Verification

B. Validation

C. Post accreditation

D. Definition

Correct Answer:B

Question 33

Which of the following is NOT an objective of the security program

A. Security education

B. Information classification

C. Security organization

D. Security plan

Correct Answer:D

Question 34

Which of the following Registration Tasks sets up the system architecture description, and describes the C&A boundary

A. Registration Task 3

B. Registration Task 4

C. Registration Task 2

D. Registration Task 1

Correct Answer:B

Question 35

In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47, do the organizations build and execute a plan for establishing the interconnection, including executing or configuring appropriate security controls

A. Establishing the interconnection

B. Planning the interconnection

C. Disconnecting the interconnection

D. Maintaining the interconnection

Correct Answer:A

Question 36

Lisa is the project manager of the SQL project for her company. She has completed the risk response planning with her project team and is now ready to update the risk register to reflect the risk response. Which of the following statements best describes the level of detail Lisa should include with the risk responses she has created

A. The level of detail must define exactly the risk response for each identified risk.

B. The level of detail is set of project risk governance.

C. The level of detail is set by historical information.

D. The level of detail should correspond with the priority ranking.

Correct Answer:D

START ISSEP EXAM