CISSP-ISSEP Free Practice Test

Which of the following processes illustrate the study of a technical nature of interest to focused audience, and consist of interim or final reports on work made by NIST for external
sponsors, including government and non-government sponsors

1. A. Federal Information Processing Standards (FIPS)
2. B. Special Publication (SP)
3. C. NISTIRs (Internal Reports)
4. D. DIACAP

Correct Answer: C

Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process

1. A. Chief Information Officer
2. B. Authorizing Official
3. C. Common Control Provider
4. D. Senior Agency Information Security Officer

Correct Answer: C

Which of the following individuals informs all C&A participants about life cycle actions, security requirements, and documented user needs

1. A. User representative
2. B. DAA
3. C. Certification Agent
4. D. IS program manager

Correct Answer: D

Which of the following are the benefits of SE as stated by MIL-STD-499B Each correct answer represents a complete solution. Choose all that apply.

1. A. It develops work breakdown structures and statements of work.
2. B. It establishes and maintains configuration management of the system.
3. C. It develops needed user training equipment, procedures, and data.
4. D. It provides high-quality products and services, with the correct people and performance features, at an affordable price, and on time.

Correct Answer: ABC

Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle

1. A. Phase 1, Definition
2. B. Phase 3, Validation
3. C. Phase 4, Post Accreditation Phase
4. D. Phase 2, Verification

Correct Answer: C