CISSP-ISSEP 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which of the following configuration management system processes keeps track of the changes so that the latest acceptable configuration specifications are readily available

A.Configuration Identification
B.Configuration Verification and Audit
C.Configuration Status and Accounting
D.Configuration Control

正解:

Question No : 2
SIMULATION
For interactive and self-paced preparation of exam ISSEP, try our practice exams. Practice exams also include self assessment and reporting features! Fill in the blank with an appropriate word. _______ has the goal to securely interconnect people and systems independent of time or location.

正解: Netcentric

Question No : 3
The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively.
Which of the following statements are true about ISSO and ISSE Each correct answer represents a complete solution? Choose all that apply.

A.An ISSE manages the security of the information system that is slated for Certification & Accreditation (C&A).
B.An ISSE provides advice on the impacts of system changes.
C.An ISSE provides advice on the continuous monitoring of the information system.
D.An ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A).
E.An ISSO takes part in the development activities that are required to implement system changes.

正解:

Question No : 4
Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completeness of the relationship

A.FIPS 200
B.NIST SP 800-50
C.Traceability matrix
D.FIPS 199

正解:

Question No : 5
Which of the following DoD policies provides assistance on how to implement policy, assign responsibilities, and prescribe procedures for applying integrated, layered protection of the DoD information systems and networks

A.DoD 8500.1 Information Assurance (IA)
B.DoDI 5200.40
C.DoD 8510.1-M DITSCAP
D.DoD 8500.2 Information Assurance Implementation

正解:

Question No : 6
Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection mechanism

A.Internet Key Exchange (IKE) Protocol
B.SMIME
C.Internet Protocol Security (IPSec)
D.Secure Socket Layer (SSL)

正解:

Question No : 7
Which of the following is designed to detect unwanted attempts at accessing, manipulating, and disabling of computer systems through the Internet

A.DAS
B.IDS
C.ACL
D.Ipsec

正解:

Question No : 8
SIMULATION
Fill in the blank with the appropriate phrase. The ____________ is the risk that remains after the implementation of new or enhanced controls.

正解: residual risk

Question No : 9
TQM recognizes that quality of all the processes within an organization contribute to the quality of the product.
Which of the following are the most important activities in the Total Quality Management Each correct answer represents a complete solution? Choose all that apply.

A.Quality renewal
B.Maintenance of quality
C.Quality costs
D.Quality improvements

正解:

Question No : 10
You work as a security engineer for BlueWell Inc. You are working on the ISSE model. In which of the following phases of the ISSE model is the system defined in terms of what security is needed

A.Define system security architecture
B.Develop detailed security design
C.Discover information protection needs
D.Define system security requirements

正解:

Question No : 11
SIMULATION
Fill in the blank with an appropriate phrase. __________ seeks to improve the quality of process outputs by identifying and removing the causes of defects and variability in manufacturing and business processes.

正解: Six Sigma

Question No : 12
Which of the following processes illustrate the study of a technical nature of interest to focused audience, and consist of interim or final reports on work made by NIST for external sponsors, including government and non-government sponsors

A.Federal Information Processing Standards (FIPS)
B.Special Publication (SP)
C.NISTIRs (Internal Reports)
D.DIACAP

正解:

Question No : 13
You work as a Network Administrator for PassGuide Inc. You need to secure web services of your company in order to have secure transactions.
Which of the following will you recommend for providing security?

A.HTTP
B.VPN
C.SMIME
D.SSL

正解:

Question No : 14
The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation.
What are the process activities of this phase Each correct answer represents a complete solution? Choose all that apply.

A.Assessment of the Analysis Results
B.Certification analysis
C.Registration
D.System development
E.Configuring refinement of the SSAA

正解:

Question No : 15
Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed

A.Security Control Assessment Task 3
B.Security Control Assessment Task 1
C.Security Control Assessment Task 4
D.Security Control Assessment Task 2

正解:

(ISC)2 CISSP-ISSEP 問題練習