Exam (elaborations)
ISSEP - IA Governance Final Exam Questions And Answers
- Course
- Institution
ISSEP - IA Governance Final Exam Questions And Answers...
[Show more]
Content preview
ISSEP - IA Governance Final Exam Questions And AnswersCNSSP No. 22 - Answer This Committee on National Security Systems Policy CNSSP
describes the enterprise IA risk management requirements for the national security
community, and in doing so, requires a holistic view of the IA risks to National Security
Systems operating within the enterprise using disciplined processes, methods, tools.
CNSSI No. 4012 - Answer National Training Standard for Senior System Managers SSMs
• CIOs, DAAs, CTOs, etc., shall be trained to the level of proficiency in this instruction
• SSM shall review and evaluate authorization (C&A) packages for validity and
dependability
CNSSI No. 4014 - Question National Training Standard for Information Systems Security
Officers
Specifies three levels of proficiency:
• Entry - Can identify vulnerabilities and recommend security solutions
• Intermediate - Analyze and define security architectures to operate at a given trust
level
• Advanced - Evaluate an authorization package and render an appropriate
recommendation to a DAA
FIPS 188 -ANS Security Label for Information Transfer
• Specifies "syntactic constructs" for representing security label data when Government
sensitive but unclassified information is exchanged across computer networks
FIPS Level 3 security -ANS Provides identity-based authentication, intrusion prevention
, and critical access parameters
NSTISSI No. 7003 -ANS Protected Distribution Systems (PDS)
• Stipulates the approval authority, standards and guidelines for the design, installation
and maintenance of PDSs
• PDS used to transmit unencrypted classified information through a lesser classified
area
• Must provide the following adequate safeguards :
• Electrical
• Electromagnetic • Physical
• System must be able to detect a penetration attempt of the PDS
NSTISSP No. 7 - Answer Secure Electronic Messaging Services
NSTISSP No. 200 - Answer Controlled Access Protection
CNSS Advisory Memorandum INFORMATION ASSURANCE/I-04 - Answer • A multi-tiered
approach should be provided for in developing and implementing security solutions
using Defense-in-Depth
• Compliant products shall be procured, if possible, from a diverse range of
manufacturers.
• A known vulnerability in one manufacturer's product is offset with security provided by
another manufacturer's products
• Hardware and software diversity shall contribute to overall system security
CNSSD No. 502 - National Directive on Security of National Security Systems
• Ensures the security of NSSs is vitally important to the operational effectiveness of
national security activities
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Easton. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
67866 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now