Limited-Time Offer: Enjoy 50% Savings! Ends in 00h 00m 00s Coupon code: 50OFF
Skip to content

Free ISC2 Information Systems Security Engineering Professional ISSEP Exam Questions

Page: 1 / 15 Total 214 questions

Want more questions? Get Premium Access.

Question 1

You work as a security engineer for BlueWell Inc. You are working on the ISSE model. In which of the following phases of the ISSE model is the system defined in terms of what security is needed

Correct Answer: D. Define system security requirements

Question 2

The functional analysis process is used for translating system requirements into detailed function criteri

a. Which of the following are the elements of functional analysis process Each correct answer represents a complete solution. Choose all that apply.

Correct Answer: A. Model possible overall system behaviors that are needed to achieve the system requirements.; B. Develop concepts and alternatives that are not technology or component bound.; D. Use a top-down with some bottom-up approach verification.

Question 3

Which of the following agencies is responsible for funding the development of many technologies such as computer networking, as well as NLS

Correct Answer: A. DARPA

Question 4

Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completeness of the relationship

Correct Answer: C. Traceability matrix

Question 5

TQM recognizes that quality of all the processes within an organization contribute to the quality of the product. Which of the following are the most important activities in the Total Quality Management Each correct answer represents a complete solution. Choose all that apply.

Correct Answer: A. Quality renewal; B. Maintenance of quality; D. Quality improvements

Question 6

The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems that handle U.S. national security information. What are the different types of NIACAP accreditation Each correct answer represents a complete solution. Choose all that apply.

Correct Answer: A. Type accreditation; B. Site accreditation; C. System accreditation

Question 7

Which of the following security controls is a set of layered security services that address communications and data security problems in the emerging Internet and intranet application space

Correct Answer: B. Common data security architecture (CDSA)

Question 8

Which of the following cooperative programs carried out by NIST provides a nationwide network of local centers offering technical and business assistance to small manufacturers

Correct Answer: C. Manufacturing Extension Partnership

Question 9

Which of the following is a subset discipline of Corporate Governance focused on information security systems and their performance and risk management

Correct Answer: C. ISG

Question 10

Which of the following certification levels requires the completion of the minimum security checklist and more in-depth, independent analysis

Correct Answer: A. CL 3

Question 11

You work as a security engineer for BlueWell Inc. According to you, which of the following statements determines the main focus of the ISSE process

Correct Answer: B. Identify the information protection needs.

Question 12

Which of the following DoD policies establishes policies and assigns responsibilities to achieve DoD IA through a defense-in-depth approach that integrates the capabilities of personnel, operations, and technology, and supports the evolution to network-centric warfare

Correct Answer: D. DoD 8500.1 Information Assurance (IA)

Question 13

Which of the following processes describes the elements such as quantity, quality, coverage, timelines, and availability, and categorizes the different functions that the system will need to perform in order to gather the documented missionbusiness needs

Correct Answer: A. Functional requirements

Question 14

Which of the following are the benefits of SE as stated by MIL-STD-499B Each correct answer represents a complete solution. Choose all that apply.

Correct Answer: A. It develops work breakdown structures and statements of work.; B. It establishes and maintains configuration management of the system.; C. It develops needed user training equipment, procedures, and data.

Question 15

You have been tasked with finding an encryption methodology that will encrypt most types of email attachments. The requirements are that your solution must use the RSA algorithm. Which of the following is your best choice

Correct Answer: B. SMIME