ISSEP Free Practice Test

Which of the following email lists is written for the technical audiences, and provides weekly summaries of security issues, new vulnerabilities, potential impact, patches and workarounds, as well as the actions recommended to mitigate risk

1. A. Cyber Security Tip
2. B. Cyber Security Alert
3. C. Cyber Security Bulletin
4. D. Technical Cyber Security Alert

Correct Answer: C

Certification and Accreditation (C&A or CnA) is a process for implementing information security. Which of the following is the correct order of C&A phases in a DITSCAP assessment

1. A. Definition, Validation, Verification, and Post Accreditation
2. B. Verification, Definition, Validation, and Post Accreditation
3. C. Verification, Validation, Definition, and Post Accreditation
4. D. Definition, Verification, Validation, and Post Accreditation

Correct Answer: D

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one

1. A. Configuration Item Costing
2. B. Configuration Identification
3. C. Configuration Verification and Auditing
4. D. Configuration Status Accounting

Correct Answer: A

The Concept of Operations (CONOPS) is a document describing the characteristics of a proposed system from the viewpoint of an individual who will use that system. Which of the following points are included in CONOPS Each correct answer represents a complete solution. Choose all that apply.

1. A. Strategies, tactics, policies, and constraints affecting the system
2. B. Organizations, activities, and interactions among participants and stakeholders
3. C. Statement of the structure of the system
4. D. Clear statement of responsibilities and authorities delegated
5. E. Statement of the goals and objectives of the system

Correct Answer: ABDE

Which of the following documents is described in the statement below It is developed along with all processes of the risk management. It contains the results of the qualitative risk analysis, quantitative risk analysis, and risk response planning.

1. A. Risk management plan
2. B. Project charter
3. C. Quality management plan
4. D. Risk register

Correct Answer: D