MENU
Which of the following types of CNSS issuances establishes or describes policy and programs,
provides authority, or assigns responsibilities?
Suggested Answer: B
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The various CNSS issuances are as follows:
Policies: It assigns responsibilities and establishes criteria (NSTISSP) or (CNSSP).
Directives: It establishes or describes policy and programs, provides authority, or assigns
responsibilities (NSTISSD).
Instructions: It describes how to implement the policy or prescribes the manner of a policy (NSTISSI).
Advisory memoranda: It provides guidance on policy and may cover a variety of topics involving
information assurance,
telecommunications security, and network security (NSTISSAM).
11 comments · newest first
TA
Tamekia
11 months ago
I’m leaning towards B too, makes the most sense.
EM
Emmett
12 months ago
I thought it was A, Instructions. Seems off!
GL
Glen
12 months ago
Wait, are we sure it's not C, Policies?
LE
Lera
12 months ago
I agree, Directives are key for authority!
BI
Billye
1 year ago
Definitely think it's B, Directives.
AL
Aliza
1 year ago
"Advisory memoranda" sounds too informal for establishing policy, so I think it has to be either "Directives" or "Policies."
MY
Myrtie
1 year ago
I'm leaning towards "Instructions" because they often provide specific guidance, but I could be mixing it up with something else.
LA
Laila
1 year ago
I remember practicing a question similar to this, and I think "Policies" could also fit, but it seems more general.
LO
Loise
1 year ago
I think it might be "Directives" since they usually outline policies and responsibilities, but I'm not entirely sure.
JE
Jennifer
1 year ago
Hmm, I'm a little unsure about this one. I know organic reach has to do with unpaid distribution, but I'm not 100% sure if that's the full definition. I might need to think this through a bit more.
RO
Rosina
1 year ago
I'm not totally sure about this one. There are a lot of moving parts, with the training program, the security breach, and the lack of proper data management procedures. I think I need to re-read the scenario a few times to make sure I'm not missing any key details that could impact the best approach for Pacific Suites.