Free ISC2 ISSEP Exam Questions

Become ISC2 Certified with updated ISSEP exam questions and correct answers

Page: 1 / 44

Total 220 Questions | Updated On: May 11, 2026

Add To Cart

Question 1

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States Code?

A : pe I cryptography

B : pe II cryptography

C : pe III (E) cryptography

D : pe III cryptography

Answer: B

Question 2

Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system?

A : tem Owner

B : formation Systems Security Officer (ISSO)

C : ignated Approving Authority (DAA)

D : ief Information Security Officer (CISO)

Answer: C

Question 3

Which of the following is NOT an objective of the security program?

A : curity education

B : formation classification

C : curity organization

D : curity plan

Answer: D

Question 4

In which of the following DIACAP phases is residual risk analyzed?

A : ase 2

B : ase 3

C : ase 5

D : ase 1

E : Phase 4

Answer: A

Question 5

Which of the following documents contains the threats to the information management, and the security services and controls required to counter those threats?

A : tem Security Context

B : formation Protection Policy (IPP)

C : NOPS

D : M

Answer: B

Page: 1 / 44

Total 220 Questions | Updated On: May 11, 2026

Add To Cart