Question 1

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States Code?

Options :

A : Type I cryptography

B : Type II cryptography

C : Type III (E) cryptography

D : Type III cryptography

Answer: B

Question 2

Which of the following are the most important tasks of the Information Management Plan (IMP)? Each correct answer represents a complete solution. Choose all that apply.

Options :

A : Define the Information Protection Policy (IPP)

B : Define the System Security Requirements

C : Define the mission need

D : Identify how the organization manages its information.

Answer: A,C,D

Question 3

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight InformationAssurance (IA) areas, and the controls are referred to as IA controls. Which of the following areamong the eight areas of IA defined by DoD?Each correct answer represents a complete solution. Choose all that apply

Options :

A : DC Security Design & Configuration

B : EC Enclave and Computing Environment

C : VI Vulnerability and Incident Management

D : Information systems acquisition, development, and maintenance

Answer: A,B,C

Question 4

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution. Choose two.

Options :

A : Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system

B : Accreditation is the official management decision given by a senior agency official to authorize operation of an information system

C : Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.

D : Certification is the official management decision given by a senior agency official to authorize operation of an information system.

Answer: B,C

Question 5

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

Options :

A : System Security Context

B : Information Protection Policy (IPP)

C : CONOPS

D : IMM

Answer: B

Confidently Practice Online with Free ISSEP Exam Cram

Buying Options: