Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 1 Question 66 Discussion

Posted by Gail on Mar 21, 2023 at 04:22 AM

Which of the following is NOT used in the practice of Information Assurance (IA) to define assurance requirements

Suggested Answer: B

The types of cryptography defined by FIPS 185 are as follows:

Type I cryptography: It describes a cryptographic algorithm or a tool accepted by the National

Security Agency for protecting classified

information.

Type II cryptography: It describes a cryptographic algorithm or a tool accepted by the National

Security Agency for protecting

sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States

Code, or Section 3502(2) of Title

44, United States Code.

Type III cryptography: It describes a cryptographic algorithm or a tool accepted as a Federal

Information Processing Standard.

Type III (E) cryptography: It describes a Type III algorithm or a tool that is accepted for export from

the United States.


Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
35 comments · newest first
AU
Audrie 11 months ago
I thought all of these were relevant in some way.
LO
Louvenia 11 months ago
Wait, are we sure about the Parkerian Hexad? Seems important too.
KE
Kenny 12 months ago
Totally agree, the Five Pillars model is essential for assurance!
KR
Kris 12 months ago
I think the Communications Management Plan is the odd one out.
QU
Queenie 12 months ago
Classic information security model is definitely used in IA.
RY
Ryan 1 year ago
I feel like the Five Pillars model is a common reference in IA, so it probably isn't the right choice for this question.
BR
Britt 1 year ago
The Parkerian Hexad is definitely related to IA, but I can't recall if it specifically defines assurance requirements.
JE
Jestine 1 year ago
I think the Communications Management Plan might be the answer since it seems more focused on communication rather than assurance.
DO
Dorethea 1 year ago
I remember studying the classic information security model, but I'm not sure if it's the one that doesn't define assurance requirements.
IN
Inocencia 1 year ago
Hmm, the fact that it's an unlisted company with sensitive earnings makes me think the dividend valuation model might be the most accurate approach. But I'll need to double-check the details.
DO
Domingo 1 year ago
“None of the above” seems unlikely; I think there's definitely a vulnerability with the external sanitization process. I lean towards B.
JE
Jestine 1 year ago
Hmm, this one seems tricky. I'll need to think through the key details carefully.
EL
Elenore 1 year ago
Hmm, I'm a little unsure about this one. I know it has something to do with disconnecting the session, but I'm not sure if session timeout is the right answer.
TA
Tatum 1 year ago
C) Communications Management Plan? Really? That's like asking which of these is not a vegetable - broccoli, carrot, or... refrigerator. Weird question.
FR
Franklyn 1 year ago
↳ replying to Tatum
D) Parkerian Hexad
ME
Mee 1 year ago
↳ replying to Tatum
B) Five Pillars model
JU
Julene 1 year ago
↳ replying to Tatum
A) Classic information security model
LA
Laurel 1 year ago
A) Classic information security model and B) Five Pillars model sound like they could be used in IA, but C) seems out of place. I'll go with that.
SO
Solange 1 year ago
↳ replying to Laurel
Let's go with C) Communications Management Plan as the answer.
LO
Louann 1 year ago
↳ replying to Laurel
I'm not sure about D), but I'm confident that C) is not used in IA.
ST
Staci 1 year ago
↳ replying to Laurel
I think D) Parkerian Hexad is also not used in IA.
VI
Vincenza 1 year ago
↳ replying to Laurel
I agree, C) Communications Management Plan does seem out of place.
AL
Alfreda 1 year ago
↳ replying to Laurel
I see your point, but I still think C) Communications Management Plan is the odd one out.
TI
Tien 1 year ago
↳ replying to Laurel
Actually, A) Classic information security model is the one not used in IA.
KE
Kenneth 1 year ago
↳ replying to Laurel
I think D) Parkerian Hexad is also not used in IA.
JU
Justa 1 year ago
↳ replying to Laurel
I agree, C) Communications Management Plan doesn't seem to fit in IA.
GE
Genevive 1 year ago
Hmm, I was leaning towards D) Parkerian Hexad, but now I'm not so sure. This is a tricky one!
NU
Nu 2 years ago
I'm pretty sure the correct answer is C) Communications Management Plan. That's not part of the standard IA models.
TE
Tenesha 1 year ago
↳ replying to Nu
D) Parkerian Hexad is another important concept in IA.
GI
Gilma 1 year ago
↳ replying to Nu
B) Five Pillars model is also a common framework for IA.
CO
Cordelia 1 year ago
↳ replying to Nu
A) Classic information security model is definitely used in IA.
ME
Melinda 1 year ago
↳ replying to Nu
I think you're right, C) Communications Management Plan doesn't seem to fit with the other IA models.
TR
Trinidad 2 years ago
But the Communications Management Plan is more about managing communication, not defining assurance requirements.
DO
Dominga 2 years ago
I disagree, I believe it's A) Classic information security model.
TR
Trinidad 2 years ago
I think the answer is C) Communications Management Plan.
0/2000 characters

Save Cancel