QUESTION: 53

You work as a security manager for BlueWell Inc. You are going through the NIST SP 800-37 C&A methodology, which is based on four well defined phases. In which of the following phases of NIST SP 800-37 C&A methodology does the security categorization occur

Continuous Monitoring
Initiation
Security Certification
Security Accreditation

Answer(s): B

Reveal Solution Next Question

QUESTION: 54

You work as a system engineer for BlueWell Inc. You are working on translating system requirements into detailed function criteria. Which of the following diagrams will help you to show all of the function requirements and their groupings in one diagram

Activity diagram
Functional flow block diagram (FFBD)
Functional hierarchy diagram
Timeline analysis diagram

Answer(s): C

Reveal Solution Next Question

QUESTION: 55

Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle

Phase 1, Definition
Phase 3, Validation
Phase 4, Post Accreditation Phase
Phase 2, Verification

Answer(s): C

Reveal Solution Next Question

QUESTION: 56

Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed

Security Control Assessment Task 3
Security Control Assessment Task 1
Security Control Assessment Task 4
Security Control Assessment Task 2

Answer(s): A

Reveal Solution Next Question

Free ISSEP Exam Braindumps (page: 15)

QUESTION: 53

QUESTION: 54

QUESTION: 55

QUESTION: 56

ISSEP Discussions & Posts