QUESTION: 25

Which of the following federal agencies provides a forum for the discussion of policy issues, sets national policy, and promulgates direction, operational procedures, and guidance for the security of national security systems

National Security AgencyCentral Security Service (NSACSS)
National Institute of Standards and Technology (NIST)
United States Congress
Committee on National Security Systems (CNSS)

Answer(s): D

Reveal Solution Next Question

QUESTION: 26

Which of the following statements is true about residual risks

It can be considered as an indicator of threats coupled with vulnerability.
It is a weakness or lack of safeguard that can be exploited by a threat.
It is the probabilistic risk after implementing all security measures.
It is the probabilistic risk before implementing all security measures.

Answer(s): C

Reveal Solution Next Question

QUESTION: 27

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD Each correct answer represents a complete solution.
Choose all that apply.

DC Security Design & Configuration
EC Enclave and Computing Environment
VI Vulnerability and Incident Management
Information systems acquisition, development, and maintenance

Answer(s): A,B,C

Reveal Solution Next Question

QUESTION: 28

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation Each correct answer represents a complete solution. Choose two.

Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
Certification is the official management decision given by a senior agency official to authorize operation of an information system.

Answer(s): B,C

Reveal Solution Next Question

Free ISSEP Exam Braindumps (page: 8)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28

ISSEP Discussions & Posts