Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the ISC ISSEP Questions and answers with ValidTests

Exam ISSEP All Questions
Exam ISSEP Premium Access

View all detail and faqs for the ISSEP exam

Viewing page 3 out of 7 pages
Viewing questions 21-30 out of questions
Questions # 21:

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls

Options:

A.

IATO

B.

DATO

C.

ATO

D.

IATT

Expert Solution
Questions # 22:

Which of the following NIST Special Publication documents provides a guideline on network security testing

Options:

A.

NIST SP 800-60

B.

NIST SP 800-37

C.

NIST SP 800-59

D.

NIST SP 800-42

E.

NIST SP 800-53A

F.

NIST SP 800-53

Expert Solution
Questions # 23:

FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high level potential impact

Options:

A.

The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.

B.

The loss of confidentiality, integrity, or availability might result in major financial losses.

C.

The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.

D.

The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.

Expert Solution
Questions # 24:

Which of the following tools demands involvement by upper executives, in order to integrate quality into the business system and avoid delegation of quality functions to junior administrators

Options:

A.

ISO 90012000

B.

Benchmarking

C.

SEI-CMM

D.

Six Sigma

Expert Solution
Questions # 25:

Which of the following memorandums reminds the Federal agencies that it is required by law and policy to establish clear privacy policies for Web activities and to comply with those policies

Options:

A.

OMB M-01-08

B.

OMB M-03-19

C.

OMB M-00-07

D.

OMB M-00-13

Expert Solution
Questions # 26:

An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing Official Each correct answer represents a complete solution. Choose all that apply.

Options:

A.

Ascertaining the security posture of the organization's information system

B.

Reviewing security status reports and critical security documents

C.

Determining the requirement of reauthorization and reauthorizing information systems when required

D.

Establishing and implementing the organization's continuous monitoring program

Expert Solution
Questions # 27:

Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the following are the U.S. Federal Government information security standards Each correct answer represents a complete solution. Choose all that apply.

Options:

A.

CA Certification, Accreditation, and Security Assessments

B.

Information systems acquisition, development, and maintenance

C.

IR Incident Response

D.

SA System and Services Acquisition

Expert Solution
Questions # 28:

Choose and reorder the steps involved in the trade-off analysis.

Options:

A.
Expert Solution
Questions # 29:

Which of the following acts is endorsed to provide a clear statement of the proscribed activity concerning computers to the law enforcement community, those who own and operate computers, and those tempted to commit crimes by unauthorized access to computers

Options:

A.

Computer Fraud and Abuse Act

B.

Government Information Security Reform Act (GISRA)

C.

Computer Security Act

D.

Federal Information Security Management Act (FISMA)

Expert Solution
Questions # 30:

Which of the following cooperative programs carried out by NIST speed ups the development of modern technologies for broad, national benefit by co-funding research and development partnerships with the private sector

Options:

A.

Baldrige National Quality Program

B.

Advanced Technology Program

C.

Manufacturing Extension Partnership

D.

NIST Laboratories

Expert Solution
Viewing page 3 out of 7 pages
Viewing questions 21-30 out of questions