Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package?
Answer(s): D
Which of the following elements of Registration task 4 defines the operating system, database management system, and software applications, and how they will be used?
Answer(s): C
Which of the following assessment methodologies defines a six-step technical security evaluation?
You work as a systems engineer for BlueWell Inc. You want to protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. Which of the following processes will you use to accomplish the task?
Answer(s): A
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199?Each correct answer represents a complete solution. Choose all that apply.
Answer(s): A,B,C
Post your Comments and Discuss ISC CISSP-ISSEP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISSP-ISSEP content, but please register or login to continue.