New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 1 Question 23 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 23
Topic #: 1
[All ISSEP Questions]

Which of the following types of CNSS issuances establishes or describes policy and programs,

provides authority, or assigns responsibilities?

Show Suggested Answer Hide Answer
Suggested Answer: B

The various CNSS issuances are as follows:

Policies: It assigns responsibilities and establishes criteria (NSTISSP) or (CNSSP).

Directives: It establishes or describes policy and programs, provides authority, or assigns

responsibilities (NSTISSD).

Instructions: It describes how to implement the policy or prescribes the manner of a policy (NSTISSI).

Advisory memoranda: It provides guidance on policy and may cover a variety of topics involving

information assurance,

telecommunications security, and network security (NSTISSAM).


Contribute your Thoughts:

0/2000 characters
Tamekia
4 months ago
I’m leaning towards B too, makes the most sense.
upvoted 0 times
...
Emmett
4 months ago
I thought it was A, Instructions. Seems off!
upvoted 0 times
...
Glen
4 months ago
Wait, are we sure it's not C, Policies?
upvoted 0 times
...
Lera
4 months ago
I agree, Directives are key for authority!
upvoted 0 times
...
Billye
5 months ago
Definitely think it's B, Directives.
upvoted 0 times
...
Aliza
5 months ago
"Advisory memoranda" sounds too informal for establishing policy, so I think it has to be either "Directives" or "Policies."
upvoted 0 times
...
Myrtie
5 months ago
I'm leaning towards "Instructions" because they often provide specific guidance, but I could be mixing it up with something else.
upvoted 0 times
...
Laila
5 months ago
I remember practicing a question similar to this, and I think "Policies" could also fit, but it seems more general.
upvoted 0 times
...
Loise
5 months ago
I think it might be "Directives" since they usually outline policies and responsibilities, but I'm not entirely sure.
upvoted 0 times
...
Jennifer
5 months ago
Hmm, I'm a little unsure about this one. I know organic reach has to do with unpaid distribution, but I'm not 100% sure if that's the full definition. I might need to think this through a bit more.
upvoted 0 times
...
Rosina
5 months ago
I'm not totally sure about this one. There are a lot of moving parts, with the training program, the security breach, and the lack of proper data management procedures. I think I need to re-read the scenario a few times to make sure I'm not missing any key details that could impact the best approach for Pacific Suites.
upvoted 0 times
...

Save Cancel