Discuss ISC2 CAP Exam Topic 5 Question 66

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about ISSO and ISSE?

Each correct answer represents a complete solution. Choose all that apply.

AAn ISSE manages the security of the information system that is slated for Certification & Accreditation (C&A).

BAn ISSO takes part in the development activities that are required to implement system changes.

CAn ISSE provides advice on the continuous monitoring of the information system.

DAn ISSE provides advice on the impacts of system changes.

EAn ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A).

Suggested Answer: C, D, E

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Marta 11 months ago

Yep, ISSE is all about continuous monitoring advice!

Hector 11 months ago

Wait, can an ISSE really manage security? That seems off.

Brinda 12 months ago

Totally agree, ISSO is more about implementation!

Yuki 12 months ago

I thought ISSO handled the C&A process?

Maybelle 12 months ago

ISSE definitely advises on system changes.

Ashley 1 year ago

I feel like both roles overlap a bit, especially with system changes, but I’m uncertain about which one manages C&A.

Wilda 1 year ago

I practiced a similar question where the ISSO was involved in system changes, so I think option B might be correct.

Torie 1 year ago

I think the ISSE definitely advises on continuous monitoring, but I can't recall if they manage security for C&A.

Maile 1 year ago

I remember that the ISSO is more focused on the overall security management, but I'm not sure if they handle C&A directly.

Buck 1 year ago

I feel pretty confident about this one. The objective of the Hi test environment is to find non-functional errors, not just functional errors, so option A is incorrect. And the HiL environment is more complex than the MiL or SiL environments, so option B is also wrong. I think the correct answer is D.

Shanda 1 year ago

I feel pretty confident about this one. If Sarah was unaware that she was infringing, then she should not be found guilty. The key is establishing her state of mind.

Cheryl 1 year ago

This question seems straightforward, I think the key is to identify the two required steps from the options provided.

Stephanie 1 year ago

Using the customer organization's processes could work, but I'm not sure if that aligns with the service provider's own ways of working. Might be better to use their own as a starting point.

Svetlana 1 year ago

Wait, I'm a bit confused. What exactly are we looking for that's "useless" when evaluating the exit criteria? I need to make sure I understand the question properly.

ISC2 CAP Exam - Topic 5 Question 66 Discussion