Free ISC2 ISSEP Exam Questions

Become ISC2 Certified with updated ISSEP exam questions and correct answers

Page: 1 / 44

Total 220 Questions | Updated On: May 11, 2026

Add To Cart

Question 1

Which of the following is NOT an objective of the security program?

A : curity education

B : formation classification

C : curity organization

D : curity plan

Answer: D

Question 2

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information

Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are

among the eight areas of IA defined by DoD?

Each correct answer represents a complete solution. Choose all that apply

A : Security Design & Configuration

B : Enclave and Computing Environment

C : Vulnerability and Incident Management

D : formation systems acquisition, development, and maintenance

Answer: A,B,C

Question 3

You work as a Network Administrator for uCertify Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recommend for providing security?

A : TP

B : N

C : MIME

D : L

Answer: D

Question 4

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

A : tem Security Context

B : formation Protection Policy (IPP)

C : NOPS

D : M

Answer: B

Question 5

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

A : nfiguration Item Costing

B : nfiguration Identification

C : nfiguration Verification and Auditing

D : nfiguration Status Accounting

Answer: A

Page: 1 / 44

Total 220 Questions | Updated On: May 11, 2026

Add To Cart