最新的ISC CISSP-ISSEP - Information Systems Security Engineering Professional - CISSP-ISSEP免費考試真題
Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls?
正確答案: C
Which of the following DITSCAPNIACAP model phases is used to confirm that the evolving system development and integration complies with the agreements between role players documented in the first phase?
正確答案: B
Which of the following laws is the first to implement penalties for the creator of viruses, worms, and other types of malicious code that causes harm to the computer systems?
正確答案: A
Which of the following processes illustrate the study of a technical nature of interest to focused audience, and consist of interim or final reports on work made by NIST for external sponsors, including government and non-government sponsors?
正確答案: B
Which of the following federal laws establishes roles and responsibilities for information security, risk management, testing, and training, and authorizes NIST and NSA to provide guidance for security planning and implementation?
正確答案: B
You work as a security engineer for BlueWell Inc. You are working on the ISSE model. In which of the following phases of the ISSE model is the system defined in terms of what security is needed?
正確答案: C
Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the information system. Which of the following phases of NIST SP 800-37 C&A methodology will define the above task?
正確答案: C
Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident?
正確答案: D
Which of the following federal laws are related to hacking activities? Each correct answer represents a complete solution. Choose three.
正確答案: B,C,D
What NIACAP certification levels are recommended by the certifier? Each correct answer represents a complete solution. Choose all that apply.
正確答案: A,C,D,E
A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization.
What are the different types of policies? Each correct answer represents a complete solution.
Choose all that apply.
What are the different types of policies? Each correct answer represents a complete solution.
Choose all that apply.
正確答案: A,B,C
Which of the following refers to an information security document that is used in the United States Department of Defense (DoD) to describe and accredit networks and systems?
正確答案: A
Which of the following DoD policies provides assistance on how to implement policy, assign responsibilities, and prescribe procedures for applying integrated, layered protection of the DoD information systems and networks?
正確答案: C
Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?
正確答案: B
Registration Task 5 identifies the system security requirements. Which of the following elements of Registration Task 5 defines the type of data processed by the system?
正確答案: A