최신ISC CISSP-ISSEP - Information Systems Security Engineering Professional - CISSP-ISSEP무료샘플문제
문제1
Which of the following organizations assists the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies?
Which of the following organizations assists the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies?
정답: B
문제2
Fill in the blank with an appropriate phrase. _________________ is used to verify and accredit systems by making a standard process, set of activities, general tasks, and management structure.
Fill in the blank with an appropriate phrase. _________________ is used to verify and accredit systems by making a standard process, set of activities, general tasks, and management structure.
정답: A
문제3
The functional analysis process is used for translating system requirements into detailed function criteria. Which of the following are the elements of functional analysis process? Each correct answer represents a complete solution. Choose all that apply.
The functional analysis process is used for translating system requirements into detailed function criteria. Which of the following are the elements of functional analysis process? Each correct answer represents a complete solution. Choose all that apply.
정답: B,C,D
문제4
DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels.
Which of the following MAC levels requires high integrity and medium availability?
DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels.
Which of the following MAC levels requires high integrity and medium availability?
정답: D
문제5
Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?
Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?
정답: A
문제6
Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality?
Which of the following documents is defined as a source document, which is most useful for the ISSE when classifying the needed security functionality?
정답: D
문제7
Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package?
Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package?
정답: D
문제8
Under which of the following CNSS policies, NIACAP is mandatory for all the systems that process USG classified information?
Under which of the following CNSS policies, NIACAP is mandatory for all the systems that process USG classified information?
정답: C
문제9
Which of the following DITSCAPNIACAP model phases is used to confirm that the evolving system development and integration complies with the agreements between role players documented in the first phase?
Which of the following DITSCAPNIACAP model phases is used to confirm that the evolving system development and integration complies with the agreements between role players documented in the first phase?
정답: C
문제10
Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?
Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?
정답: C
문제11
Continuous Monitoring is the fourth phase of the security certification and accreditation process.
What activities are performed in the Continuous Monitoring process? Each correct answer represents a complete solution. Choose all that apply.
Continuous Monitoring is the fourth phase of the security certification and accreditation process.
What activities are performed in the Continuous Monitoring process? Each correct answer represents a complete solution. Choose all that apply.
정답: C,D,E
문제12
Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance for the security of national security systems?
Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance for the security of national security systems?
정답: A