CISSP-ISSEP Exam Questions and Answers

QUESTION: 9

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

System Security Context
Information Protection Policy (IPP)
CONOPS
IMM

Answer(s): B

Reveal Solution Next Question

QUESTION: 10

Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States?

Lanham Act
FISMA
Computer Fraud and Abuse Act
Computer Misuse Act

Answer(s): B

Reveal Solution Next Question

QUESTION: 11

Which of the following memorandums directs the Departments and Agencies to post clear privacy policies on World Wide Web sites, and provides guidance for doing it?

OMB M-99-18
OMB M-00-13
OMB M-03-19
OMB M-00-07

Answer(s): A

Reveal Solution Next Question

QUESTION: 12

Which of the following federal agencies coordinates, directs, and performs highly specialized activities to protect U.S. information systems and produces foreign intelligence information?

National Institute of Standards and Technology (NIST)
National Security AgencyCentral Security Service (NSACSS)
Committee on National Security Systems (CNSS)
United States Congress

Answer(s): B

Reveal Solution Next Question

QUESTION: 13

Which of the following documents were developed by NIST for conducting Certification & Accreditation (C&A)?
Each correct answer represents a complete solution. Choose all that apply.

NIST Special Publication 800-59
NIST Special Publication 800-60
NIST Special Publication 800-37A
NIST Special Publication 800-37
NIST Special Publication 800-53
NIST Special Publication 800-53A

Answer(s): A,B,D,E,F

Reveal Solution Next Question

FIPS 199 defines the three levels of potential impact on organizations. Which of the following potential impact levels shows limited adverse effects on organizational operations, organizational assets, or individuals?

Moderate
Medium
High
Low

Answer(s): D

Reveal Solution Next Question

QUESTION: 15

Fill in the blanks with an appropriate phrase. A ________ is an approved build of the product, and can be a single component or a combination of components.

development baseline

Answer(s): A

Reveal Solution Next Question

QUESTION: 16

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States Code?

Type I cryptography
Type II cryptography
Type III (E) cryptography
Type III cryptography

Answer(s): B

Reveal Solution Next Question

ISC CISSP-ISSEP Exam (page: 2)
ISC Information Systems Security Engineering Professional
Updated on: 12-Feb-2026

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

ISC CISSP-ISSEP Exam (page: 2) ISC Information Systems Security Engineering Professional Updated on: 12-Feb-2026

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

ISC CISSP-ISSEP Exam (page: 2)
ISC Information Systems Security Engineering Professional
Updated on: 12-Feb-2026