CISSP-ISSEP Free Practice Test

Which of the following is a document, usually in the form of a table, that correlates any two baseline documents that require a many-to-many relationship to determine the completeness of the relationship

1. A. FIPS 200
2. B. NIST SP 800-50
3. C. Traceability matrix
4. D. FIPS 199

Correct Answer: C

You work as a security engineer for BlueWell Inc. Which of the following documents will you use as a guide for the security certification and accreditation of Federal Information Systems

1. A. NIST Special Publication 800-59
2. B. NIST Special Publication 800-37
3. C. NIST Special Publication 800-60
4. D. NIST Special Publication 800-53

Correct Answer: B

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of System Authorization Plan Each correct answer represents a part of the solution. Choose all that apply.

1. A. Certification
2. B. Authorization
3. C. Post-certification
4. D. Post-Authorization
5. E. Pre-certification

Correct Answer: ABDE

Which of the following are the major tasks of risk management Each correct answer represents a complete solution. Choose two.

1. A. Risk identification
2. B. Building Risk free systems
3. C. Assuring the integrity of organizational data
4. D. Risk control

Correct Answer: AD

Which of the following are the functional analysis and allocation tools Each correct answer represents a complete solution. Choose all that apply.

1. A. Functional flow block diagram (FFBD)
2. B. Activity diagram
3. C. Timeline analysis diagram
4. D. Functional hierarchy diagram

Correct Answer: ACD