A. Providing IA Certification and Accreditation
B. Providing command and control and situational awareness
C. Defending systems
D. Protecting information

Answer(s): B,C,D
QUESTION: 32
Which of the following security controls is a set of layered security services that address
communications and data security problems in the emerging Internet and intranet application
space?

A. Internet Protocol Security (IPSec)
B. Common data security architecture (CDSA)
C. File encryptors
D. Application program interface (API)

Answer(s): B

QUESTION: 33
Fil in the blank with the appropriate phrase. The ____________ is the risk that remains after the
implementation of new or enhanced controls.

A. residual risk

Answer(s): A
QUESTION: 34
Fil in the blank with an appropriate section name. _________________ is a section of the
SEMP template, which specifies the methods and reasoning planned to build the requisite
trade-offs between functionality, performance, cost, and risk.

A. System Analysis

Answer(s): A

QUESTION: 35
You work as a security engineer for BlueWel Inc. Which of the following documents wil you use
as a guide for the security certification and accreditation of Federal Information Systems?

A. NIST Special Publication 800-59
B. NIST Special Publication 800-37
C. NIST Special Publication 800-60
D. NIST Special Publication 800-53

Answer(s): B

QUESTION: 36
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a
methodology for assessing the security of information systems. Which of the following FITSAF
https://Free-Braindumps.com
9

Free ISC CISSP-ISSEP Exam Braindumps (page: 8)

CISSP-ISSEP Exam Discussions & Posts