Free ISC CISSP-ISSEP Exam Dumps Questions & Answers

Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package?

• A.Security Certification
• B.Continuous Monitoring
• C.Security Accreditation
• D.Initiation

Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the following are the U.S. Federal Government information security standards? Each correct answer represents a complete solution. Choose all that apply.

• A.Information systems acquisition, development, and maintenance
• B.CA Certification, Accreditation, and Security Assessments
• C.SA System and Services Acquisition
• D.IR Incident Response

Diane is the project manager of the HGF Project. A risk that has been identified and analyzed in the project planning processes is now coming into fruition.
What individual should respond to the risk with the preplanned risk response?

• A.Diane
• B.Project sponsor
• C.Risk owner
• D.Subject matter expert

Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that apply.

• A.It provides for entry and storage of individual system data.
• B.It performs vulnerabilitythreat analysis assessment.
• C.It provides data needed to accurately assess IA readiness.
• D.It identifies and generates IA requirements.

Fill in the blanks with an appropriate phrase. The______________ is the process of translating system requirements into detailed function criteri a.

• A.functional analysis