CISSP-ISSEP Represents Practice Questions

Which of the following statements define the role of the ISSEP during the development of the detailed security design, as mentioned in the IATF document Each correct answer represents a complete solution. Choose all that apply.

Select 3 answers.

• AA. It identifies the information protection problems that needs to be solved.
• BB. It allocates security mechanisms to system security design elements.
• CC. It identifies custom security products.
• DD. It identifies candidate commercial off-the-shelf (COTS)government off-the-shelf (GOTS) security products.

Which of the following are the functional analysis and allocation tools Each correct answer represents a complete solution. Choose all that apply.

Select 3 answers.

• AA. Functional flow block diagram (FFBD)
• BB. Activity diagram
• CC. Timeline analysis diagram
• DD. Functional hierarchy diagram

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan Each correct answer represents a part of the solution. Choose all that apply.

Select 4 answers.

• AA. Certification
• BB. Authorization
• CC. Post-certification
• DD. Post-Authorization
• EE. Pre-certification

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series Each correct answer represents a complete solution. Choose all that apply.

Select 3 answers.

• AA. Providing IA Certification and Accreditation
• BB. Providing command and control and situational awareness
• CC. Defending systems
• DD. Protecting information