Free CISSP-ISSEP Exam Braindumps
Information Systems Security Engineering Professional Questions 51–55 (page: 12)

Updated On: 10-Feb-2026

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?
Each correct answer represents a complete solution. Choose two.

  1. Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
  2. Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
  3. Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
  4. Certification is the official management decision given by a senior agency official to authorize operation of an information system.

Answer(s): B,C



Which of the following federal agencies has the objective to develop and promote measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life?

  1. National Institute of Standards and Technology (NIST)
  2. National Security Agency (NSA)
  3. Committee on National Security Systems (CNSS)
  4. United States Congress

Answer(s): A



You work as a security engineer for BlueWell Inc. According to you, which of the following DITSCAPNIACAP model phases occurs at the initiation of the project, or at the initial C&A effort of a legacy system?

  1. Post Accreditation
  2. Definition
  3. Verification
  4. Validation

Answer(s): B



Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls?

  1. Certification and accreditation (C&A)
  2. Risk Management
  3. Information systems security engineering (ISSE)
  4. Information Assurance (IA)

Answer(s): A



Which of the following federal laws are related to hacking activities?
Each correct answer represents a complete solution?
Choose three.

  1. 18 U.S.C. 1030
  2. 18 U.S.C. 1029
  3. 18 U.S. 2510
  4. 18 U.S.C. 1028

Answer(s): A,B,C



Viewing page 12 of 44
Viewing questions 56 - 60 out of 214 questions


Post your Comments and Discuss ISC CISSP-ISSEP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!