Latest Jun 03, 2022 CSSLP Brain Dump A Study Guide with Tips & Tricks for passing Exam [Q196-Q211]

4/5 - (2 votes)

Latest Jun 03, 2022 CSSLP Brain Dump: A Study Guide with Tips & Tricks for passing Exam

CSSLP Question Bank: Free PDF Download Recently Updated Questions

NO.196 DRAG DROP
Drag and drop the correct DoD Policy Series at their appropriate places.
Select and Place:

NO.197 Which of the following DITSCAP phases validates that the preceding work has produced an IS that operates in a specified computing environment?

Phase 2

Phase 4

Phase 1

Phase 3

NO.198 Which of the following sections come under the ISO/IEC 27002 standard?

Security policy

Asset management

Financial assessment

Risk assessment

NO.199 Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle?

Phase 2, Verification

Phase 3, Validation

Phase 1, Definition

Phase 4, Post Accreditation Phase

NO.200 Which of the following organizations assists the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies?

OMB

NIST

NSA/CSS

DCAA

The Office of Management and Budget (OMB) is a Cabinet-level office, and is the largest office within the Executive Office of the President (EOP) of the United States. The current OMB Director is Peter Orszag and was appointed by President Barack Obama. The OMB’s predominant mission is to assist the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies. In helping to formulate the President’s spending plans, the OMB evaluates the effectiveness of agency programs, policies, and procedures, assesses competing funding demands among agencies, and sets funding priorities. The OMB ensures that agency reports, rules, testimony, and proposed legislation are consistent with the President’s Budget and with Administration policies. Answer D is incorrect. The DCAA has the aim to monitor contractor costs and perform contractor audits. Answer C is incorrect. The National Security Agency/Central Security Service (NSA/CSS) is a crypto-logic intelligence agency of the United States government. It is administered as part of the United States Department of Defense. NSA is responsible for the collection and analysis of foreign communications and foreign signals intelligence, which involves cryptanalysis. NSA is also responsible for protecting U.S. government communications and information systems from similar agencies elsewhere, which involves cryptography. NSA is a key component of the U.S. Intelligence Community, which is headed by the Director of National Intelligence. The Central Security Service is a co-located agency created to coordinate intelligence activities and cooperation between NSA and U.S. military cryptanalysis agencies. NSA’s work is limited to communications intelligence. It does not perform field or human intelligence activities. Answer B is incorrect. The National Institute of Standards and Technology (NIST), known between 1901 and 1988 as the National Bureau of Standards (NBS), is a measurement standards laboratory which is a non-regulatory agency of the United States Department of Commerce. The institute’s official mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve quality of life.

NO.201 The DoD 8500 policy series represents the Department’s information assurance strategy. Which of the following objectives are defined by the DoD 8500 series? Each correct answer represents a complete solution. Choose all that apply.

Defending systems

Providing IA Certification and Accreditation

Providing command and control and situational awareness

Protecting information

NO.202 The Project Risk Management knowledge area focuses on which of the following processes? Each correct answer represents a complete solution. Choose all that apply.

Risk Monitoring and Control

Risk Management Planning

Quantitative Risk Analysis

Potential Risk Monitoring

NO.203 An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

Anonymous

Mutual

Multi-factor

Biometrics

NO.204 Which of the following access control models uses a predefined set of access privileges for an object of a system?

Role-Based Access Control

Discretionary Access Control

Policy Access Control

Mandatory Access Control

NO.205 Which of the following process areas does the SSE-CMM define in the ‘Project and Organizational Practices’ category? Each correct answer represents a complete solution. Choose all that apply.

Provide Ongoing Skills and Knowledge

Verify and Validate Security

Manage Project Risk

Improve Organization’s System Engineering Process

NO.206 Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.

To make original determination to decide what level of classification the information requires, which is based on the business requirements for the safety of the data.

To review the classification assignments from time to time and make alterations as the business requirements alter.

To perform data restoration from the backups whenever required.

To delegate the responsibility of the data safeguard duties to the custodian.

NO.207 The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include?
Each correct answer represents a part of the solution. Choose all that apply.

Remediation of a particular vulnerability

Cost-benefit examination of countermeasures

Identification of vulnerabilities

Assessment of attacks

NO.208 What NIACAP certification levels are recommended by the certifier? Each correct answer represents a complete solution. Choose all that apply.

Comprehensive Analysis

Maximum Analysis

Detailed Analysis

Minimum Analysis

Basic Security Review

Basic System Review

NO.209 What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

Conduct validation activities.

Execute and update IA implementation plan.

Combine validation results in DIACAP scorecard.

Conduct activities related to the disposition of the system data and objects.

NO.210 Which of the following classification levels defines the information that, if disclosed to the unauthorized parties, could be reasonably expected to cause exceptionally grave damage to the national security?

Secret information

Unclassified information

Confidential information

Top Secret information

NO.211 You work as a security engineer for BlueWell Inc. According to you, which of the following DITSCAP/ NIACAP model phases occurs at the initiation of the project, or at the initial C&A effort of a legacy system?

Validation

Definition

Verification

Post Accreditation