Question 1

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information

Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are

among the eight areas of IA defined by DoD?

Each correct answer represents a complete solution. Choose all that apply

Options :

A : DC Security Design & Configuration

B : EC Enclave and Computing Environment

C : VI Vulnerability and Incident Management

D : Information systems acquisition, development, and maintenance

Answer: A,B,C

Question 2

Della works as a security engineer for BlueWell Inc. She wants to establish configuration management and control procedures that will document proposed or actual changes to the information system. Which of the following phases of NIST SP 800-37 C&A methodology will define the above task?

Options :

A : Security Certification

B : Security Accreditation

C : Initiation

D : Continuous Monitoring

Answer: D

Question 3

In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199? Each correct answer represents a complete solution. Choose all that apply.

Options :

A : High

B : Medium

C : Low

D : Moderate

Answer: A,B,C

Question 4

You work as a Network Administrator for uCertify Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recommend for providing security?

Options :

A : HTTP

B : VPN

C : S/MIME

D : SSL

Answer: D

Question 5

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

Options :

A : System Security Context

B : Information Protection Policy (IPP)

C : CONOPS

D : IMM

Answer: B

Free ISSEP Mock Exam – Practice Online Confidently

Buying Options: