ISC2 ISSEP Exam - Topic 1 Question 66 Discussion

Actual exam question for ISC2's ISSEP exam

Question #: 66
Topic #: 1

[All ISSEP Questions]

Which of the following is NOT used in the practice of Information Assurance (IA) to define assurance requirements

AClassic information security model

BFive Pillars model

CCommunications Management Plan

DParkerian Hexad

Show Suggested Answer

Suggested Answer: B

The types of cryptography defined by FIPS 185 are as follows:

Type I cryptography: It describes a cryptographic algorithm or a tool accepted by the National

Security Agency for protecting classified

information.

Type II cryptography: It describes a cryptographic algorithm or a tool accepted by the National

Security Agency for protecting

sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States

Code, or Section 3502(2) of Title

44, United States Code.

Type III cryptography: It describes a cryptographic algorithm or a tool accepted as a Federal

Information Processing Standard.

Type III (E) cryptography: It describes a Type III algorithm or a tool that is accepted for export from

the United States.

by Gail at Mar 21, 2023, 04:22 AM

Limited Time Offer

25%

Off

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Audrie

8 months ago

I thought all of these were relevant in some way.

upvoted 0 times

...

Louvenia

8 months ago

Wait, are we sure about the Parkerian Hexad? Seems important too.

upvoted 0 times

...

Kenny

9 months ago

Totally agree, the Five Pillars model is essential for assurance!

upvoted 0 times

...

Kris

9 months ago

I think the Communications Management Plan is the odd one out.

upvoted 0 times

...

Queenie

9 months ago

Classic information security model is definitely used in IA.

upvoted 0 times

...

Ryan

9 months ago

I feel like the Five Pillars model is a common reference in IA, so it probably isn't the right choice for this question.

upvoted 0 times

...

Britt

9 months ago

The Parkerian Hexad is definitely related to IA, but I can't recall if it specifically defines assurance requirements.

upvoted 0 times

...

Jestine

9 months ago

I think the Communications Management Plan might be the answer since it seems more focused on communication rather than assurance.

upvoted 0 times

...

Dorethea

9 months ago

I remember studying the classic information security model, but I'm not sure if it's the one that doesn't define assurance requirements.

upvoted 0 times

...

Inocencia

9 months ago

Hmm, the fact that it's an unlisted company with sensitive earnings makes me think the dividend valuation model might be the most accurate approach. But I'll need to double-check the details.

upvoted 0 times

...

Domingo

9 months ago

“None of the above” seems unlikely; I think there's definitely a vulnerability with the external sanitization process. I lean towards B.

upvoted 0 times

...

Jestine

10 months ago

Hmm, this one seems tricky. I'll need to think through the key details carefully.

upvoted 0 times

...

Elenore

10 months ago

Hmm, I'm a little unsure about this one. I know it has something to do with disconnecting the session, but I'm not sure if session timeout is the right answer.

upvoted 0 times

...

Tatum

1 year ago

C) Communications Management Plan? Really? That's like asking which of these is not a vegetable - broccoli, carrot, or... refrigerator. Weird question.

upvoted 0 times