CISSP-ISSEP Exam Questions and Answers

QUESTION: 17

Which of the following NIST documents describes that minimizing negative impact on an organization and a need for sound basis in decision making are the fundamental reasons organizations implement a risk management process for their IT systems?

NIST SP 800-37
NIST SP 800-30
NIST SP 800-53
NIST SP 800-60

Answer(s): B

Reveal Solution Next Question

QUESTION: 18

Which of the following cooperative programs carried out by NIST conducts research to advance the nation's technology infrastructure?

Manufacturing Extension Partnership
NIST Laboratories
Baldrige National Quality Program
Advanced Technology Program

Answer(s): B

Reveal Solution Next Question

QUESTION: 19

Which of the following memorandums reminds the departments and agencies of the OMB principles for including and funding security as an element of agency information technology systems and architectures and of the decision criteria which is used to evaluate security for information systems investments?

OMB M-00-13
OMB M-99-18
OMB M-00-07
OMB M-03-19

Answer(s): C

Reveal Solution Next Question

QUESTION: 20

Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system?

SSAA
TCSEC
FIPS
FITSAF

Answer(s): B

Reveal Solution Next Question

QUESTION: 21

Your project has several risks that may cause serious financial impact should they happen. You have studied the risk events and made some potential risk responses for the risk events but management wants you to do more. They'd like for you to create some type of a chart that identified the risk probability and impact with a financial amount for each risk event. What is the likely outcome of creating this type of chart?

Risk response plan
Quantitative analysis
Risk response
Contingency reserve

Answer(s): D

Reveal Solution Next Question

QUESTION: 22

TQM recognizes that quality of all the processes within an organization contribute to the quality of the product. Which of the following are the most important activities in the Total Quality Management?
Each correct answer represents a complete solution. Choose all that apply.

Quality renewal
Maintenance of quality
Quality costs
Quality improvements

Answer(s): A,B,D

Reveal Solution Next Question

QUESTION: 23

Which of the following cooperative programs carried out by NIST speed ups the development of modern technologies for broad, national benefit by co-funding research and development partnerships with the private sector?

Baldrige National Quality Program
Advanced Technology Program
Manufacturing Extension Partnership
NIST Laboratories

Answer(s): B

Reveal Solution Next Question

QUESTION: 24

Which of the following types of CNSS issuances establishes criteria, and assigns responsibilities?

Advisory memoranda
Directives
Instructions
Policies

Answer(s): D

Reveal Solution Next Question

ISC CISSP-ISSEP Exam (page: 3) ISC Information Systems Security Engineering Professional Updated on: 12-Feb-2026

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

ISC CISSP-ISSEP Exam (page: 3)
ISC Information Systems Security Engineering Professional
Updated on: 12-Feb-2026