ISC CISSP-ISSEP Exam
Information Systems Security Engineering Professional (Page 4 )

Updated On: 9-Feb-2026

Which of the following memorandums directs the Departments and Agencies to post clear privacy policies on World Wide Web sites, and provides guidance for doing it?

  1. OMB M-99-18
  2. OMB M-00-13
  3. OMB M-03-19
  4. OMB M-00-07

Answer(s): A



Which of the following federal agencies coordinates, directs, and performs highly specialized activities to protect U.S. information systems and produces foreign intelligence information?

  1. National Institute of Standards and Technology (NIST)
  2. National Security AgencyCentral Security Service (NSACSS)
  3. Committee on National Security Systems (CNSS)
  4. United States Congress

Answer(s): B



Which of the following documents were developed by NIST for conducting Certification & Accreditation (C&A)?
Each correct answer represents a complete solution. Choose all that apply.

  1. NIST Special Publication 800-59
  2. NIST Special Publication 800-60
  3. NIST Special Publication 800-37A
  4. NIST Special Publication 800-37
  5. NIST Special Publication 800-53
  6. NIST Special Publication 800-53A

Answer(s): A,B,D,E,F



FIPS 199 defines the three levels of potential impact on organizations. Which of the following potential impact levels shows limited adverse effects on organizational operations, organizational assets, or individuals?

  1. Moderate
  2. Medium
  3. High
  4. Low

Answer(s): D



Fill in the blanks with an appropriate phrase. A ________ is an approved build of the product, and can be a single component or a combination of components.

  1. development baseline

Answer(s): A






Post your Comments and Discuss ISC CISSP-ISSEP exam prep with other Community members:

Join the CISSP-ISSEP Discussion