Free ISC2 ISSEP Exam Questions

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution. Choose two.

Which of the following certification levels requires the completion of the minimum security checklist and more in-depth, independent analysis?

Which of the following is NOT an objective of the security program?

Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States?

Which of the following types of cryptography defined by FIPS 185 describes a cryptographic algorithm or a tool accepted by the National Security Agency for protecting sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States Code?