Free ISC2 ISSEP Exam Questions
Try our Free Demo Practice Tests for Comprehensive ISSEP Exam Preparation
-
ISC2 ISSEP Exam Questions
-
Provided By: ISC2
- Exam: Information Systems Security Engineering Professional
- Certification: CISSP Concentrations
-
Total Questions: 220
-
Updated On: Jun 06, 2025
-
Rated: 4.9 |
-
Online Users: 440
-
Question 1
-
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199.
What levels of potential impact are defined by FIPS 199? Each correct answer represents a complete
solution. Choose all that apply.
Answer: A,B,C
-
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199.
What levels of potential impact are defined by FIPS 199? Each correct answer represents a complete
solution. Choose all that apply.
-
Question 2
-
In which of the following DIACAP phases is residual risk analyzed?
Answer: A
-
In which of the following DIACAP phases is residual risk analyzed?
-
Question 3
-
Part of your change management plan details what should happen in the change control system for
your project. Theresa, a junior project manager, asks what the configuration management activities
are for scope changes. You tell her that all of the following are valid configuration management
activities except for which one?
Answer: A
-
Part of your change management plan details what should happen in the change control system for
your project. Theresa, a junior project manager, asks what the configuration management activities
are for scope changes. You tell her that all of the following are valid configuration management
activities except for which one?
-
Question 4
-
Della works as a security engineer for BlueWell Inc. She wants to establish configuration
management and control procedures that will document proposed or actual changes to the
information system. Which of the following phases of NIST SP 800-37 C&A methodology will define
the above task?
Answer: D
-
Della works as a security engineer for BlueWell Inc. She wants to establish configuration
management and control procedures that will document proposed or actual changes to the
information system. Which of the following phases of NIST SP 800-37 C&A methodology will define
the above task?
-
Question 5
-
Which of the following certification levels requires the completion of the minimum security checklist
and more in-depth, independent analysis?
Answer: A
-
Which of the following certification levels requires the completion of the minimum security checklist
and more in-depth, independent analysis?