Question 1

Which of the following is NOT an objective of the security program?

Options :

A : Security education

B : Information classification

C : Security organization

D : Security plan

Answer: D

Question 2

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States Code?

Options :

A : Type I cryptography

B : Type II cryptography

C : Type III (E) cryptography

D : Type III cryptography

Answer: B

Question 3

Which of the following are the most important tasks of the Information Management Plan (IMP)? Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Define the Information Protection Policy (IPP)

B : Define the System Security Requirements

C : Define the mission need

D : Identify how the organization manages its information.

Answer: A,C,D

Question 4

Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States?

Options :

A : Lanham Act

B : FISMA

C : Computer Fraud and Abuse Act

D : Computer Misuse Act

Answer: B

Question 5

Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?

Options :

A : System Owner

B : Information Systems Security Officer (ISSO)

C : Designated Approving Authority (DAA)

D : Chief Information Security Officer (CISO)

Answer: C

Free ISSEP Mock Exam – Practice Online Confidently

Buying Options: