ISSEP無料問題集「ISC Information Systems Security Engineering Professional Practice Test」

質問 1

Which of the of following departments protects and supports DoD information, information systems, and information networks that are critical to the department and the armed forces during the day-to-day operations, and in the time of crisis

（A）DARPA

（B）DTIC

（C）DIAP

（D）DISA

正解：C 解答を投票する

質問 2

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls

（A）IATT

（B）DATO

（C）IATO

（D）ATO

正解：C 解答を投票する

質問 3

Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle

（A）Phase 4, Post Accreditation Phase

（B）Phase 2, Verification

（C）Phase 1, Definition

（D）Phase 3, Validation

正解：A 解答を投票する

質問 4

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series Each correct answer represents a complete solution. Choose all that apply.

（A）Providing command and control and situational awareness

（B）Providing IA Certification and Accreditation

（C）Protecting information

（D）Defending systems

正解：A、C、D 解答を投票する

質問 5

Which of the following types of CNSS issuances establishes or describes policy and programs, provides authority, or assigns responsibilities

（A）Policies

（B）Directives

（C）Advisory memoranda

（D）Instructions

正解：B 解答を投票する

質問 6

In which of the following phases of the interconnection life cycle as defined by NIST SP 800-47 does the participating organizations perform the following tasks Perform preliminary activities. Examine all relevant technical, security and administrative issues. Form an agreement governing the management, operation, and use of the interconnection.

（A）Maintaining the interconnection

（B）Establishing the interconnection

（C）Disconnecting the interconnection

（D）Planning the interconnection

正解：D 解答を投票する

質問 7

Which of the following security controls works as the totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of which is responsible for enforcing a security policy

（A）Internet Protocol Security (IPSec)

（B）Common data security architecture (CDSA)

（C）Trusted computing base (TCB)

（D）Application program interface (API)

正解：C 解答を投票する

質問 8

You work as a system engineer for BlueWell Inc. You want to verify that the build meets its data requirements, and correctly generates each expected display and report. Which of the following tests will help you to perform the above task

（A）Functional test

（B）Performance test

（C）Regression test

（D）Reliability test

正解：A 解答を投票する

質問 9

Fill in the blank with an appropriate section name. _________________ is a section of the SEMP template, which specifies the methods and reasoning planned to build the requisite trade-offs between functionality, performance, cost, and risk.

正解：

System Analysis

質問 10

Which of the following memorandums reminds the Federal agencies that it is required by law and policy to establish clear privacy policies for Web activities and to comply with those policies

（A）OMB M-03-19

（B）OMB M-00-13

（C）OMB M-01-08

（D）OMB M-00-07

正解：B 解答を投票する

質問 11

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one

（A）Configuration Item Costing

（B）Configuration Verification and Auditing

（C）Configuration Status Accounting

（D）Configuration Identification

正解：A 解答を投票する

ISSEP 無料問題集「ISC Information Systems Security Engineering Professional Practice Test」

弊社を連絡する

関連リンク

トップ試験