Question 1

Which of the following tasks obtains the customer agreement in planning the technical effort?

Options :

A : Task 9

B : Task 11

C : Task 8

D : Task 10

Answer: B

Question 2

Which of the following Registration Tasks sets up the system architecture description, and describes the C&A boundary?

Options :

A : Registration Task 3

B : Registration Task 4

C : Registration Task 2

D : Registration Task 1

Answer: B

Question 3

Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the information system. Which of the following phases of NIST SP 800-37 C&A methodology will define the above task?

Options :

A : Security Certification

B : Security Accreditation

C : Initiation

D : Continuous Monitoring

Answer: D

Question 4

Your project has several risks that may cause serious financial impact should they happen. You have

studied the risk events and made some potential risk responses for the risk events but management

wants you to do more. They'd like for you to create some type of a chart that identified the risk

probability and impact with a financial amount for each risk event. What is the likely outcome of

creating this type of chart?

Options :

A : Risk response plan

B : Quantitative analysis

C : Risk response

D : Contingency reserve

Answer: D

Question 5

Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States?

Options :

A : Lanham Act

B : FISMA

C : Computer Fraud and Abuse Act

D : Computer Misuse Act

Answer: B

Higher Test Marks with Free Online ISSEP Exam Practice

Buying Options: