ISSEP Free Practice Test

Which of the following Registration Tasks sets up the business or operational functional description and system identification

1. A. Registration Task 2
2. B. Registration Task 1
3. C. Registration Task 3
4. D. Registration Task 4

Correct Answer: B

Which of the following configuration management system processes defines which items will be configuration managed, how they are to be identified, and how they are to be documented

1. A. Configuration verification and audit
2. B. Configuration control
3. C. Configuration status accounting
4. D. Configuration identification

Correct Answer: D

Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system

1. A. SSAA
2. B. TCSEC
3. C. FIPS
4. D. FITSAF

Correct Answer: B

Which of the following statements is true about residual risks

1. A. It can be considered as an indicator of threats coupled with vulnerability.
2. B. It is a weakness or lack of safeguard that can be exploited by a threat.
3. C. It is the probabilistic risk after implementing all security measures.
4. D. It is the probabilistic risk before implementing all security measures.

Correct Answer: C

Which of the following are the phases of the Certification and Accreditation (C&A) process Each correct answer represents a complete solution. Choose two.

1. A. Auditing
2. B. Initiation
3. C. Continuous Monitoring
4. D. Detection

Correct Answer: BC