ISC Information Systems Security Engineering Professional Practice Test

QUESTION NO: 1
FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high level potential impact

A. The loss of confidentiality, integrity, or availability might result in major financial losses. B. The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent. C. The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life. D. The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.

Correct Answer: A,B,C,D

QUESTION NO: 2
DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels. Which of the following MAC levels requires basic integrity and availability

A. MAC I B. MAC III C. MAC IV D. MAC II

Correct Answer: B

QUESTION NO: 3
Which of the of following departments protects and supports DoD information, information systems, and information networks that are critical to the department and the armed forces during the day-to-day operations, and in the time of crisis

A. DARPA B. DTIC C. DISA D. DIAP

Correct Answer: D

QUESTION NO: 4
Fill in the blank with the appropriate phrase. __________ provides instructions and directions for completing the Systems Security Authorization Agreement (SSAA).

Correct Answer:

DoDI 5200.40

QUESTION NO: 5
Which of the following Security Control Assessment Tasks evaluates the operational, technical, and the management security controls of the information system using the techniques and measures selected or developed

A. Security Control Assessment Task 2 B. Security Control Assessment Task 4 C. Security Control Assessment Task 1 D. Security Control Assessment Task 3

Correct Answer: D

QUESTION NO: 6
Which of the following NIST documents describes that minimizing negative impact on an organization and a need for sound basis in decision making are the fundamental reasons organizations implement a risk management process for their IT systems

A. NIST SP 800-60 B. NIST SP 800-53 C. NIST SP 800-37 D. NIST SP 800-30

Correct Answer: D

QUESTION NO: 7
Which of the following individuals is responsible for monitoring the information system environment for factors that can negatively impact the security of the system and its accreditation

A. Chief Risk Officer B. Information System Owner C. Chief Information Officer D. Chief Information Security Officer

Correct Answer: B

QUESTION NO: 8
Which of the following federal agencies has the objective to develop and promote measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life

A. Committee on National Security Systems (CNSS) B. United States Congress C. National Institute of Standards and Technology (NIST) D. National Security Agency (NSA)

Correct Answer: C

ISC Information Systems Security Engineering Professional Practice Test - ISSEP Exam Questions