Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system
Suggested Answer: B
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
AL
Alpha
10 months ago
Wait, are we sure TCSEC is still relevant today?
KA
Kathryn
10 months ago
Yeah, TCSEC is definitely the one for security controls!
LI
Linsey
10 months ago
I thought FITSAF was a thing, but I guess not for this question?
HA
Hana
10 months ago
FIPS is more about federal standards, not just security controls.
ME
Mee
11 months ago
I think it's TCSEC. Pretty sure that's the standard.
DE
Deja
11 months ago
I’m pretty certain that TCSEC is the correct answer. It’s the one that sets the criteria for evaluating security in systems, right?
LO
Louvenia
11 months ago
I’m leaning towards SSAA, but I can't recall the specifics. I remember it had to do with security assessments.
CR
Cruz
11 months ago
I feel like I’ve seen a question like this before, and I think FIPS was mentioned as a standard, but I’m not confident it’s the right one here.
MO
Mona
12 months ago
I think the answer might be TCSEC, but I'm not completely sure. I remember it being related to evaluating security controls.
KA
Kattie
12 months ago
I remember learning about FIPS in my security class, so I think that's the best option here. It's a standard set by the National Institute of Standards and Technology (NIST) for computer security.
EL
Eloisa
12 months ago
Okay, let me think this through. TCSEC and FITSAF both sound like they could be related to security standards, but I'm not familiar with them. I'll have to make an educated guess on this one.
WI
Wilburn
1 year ago
Hmm, I'm a bit unsure about this one. I know FIPS is a standard, but I'm not sure if it's specifically for assessing security controls.
OL
Olen
1 year ago
I'm pretty sure this is asking about a standard for assessing computer security controls, so I'll focus on the options that seem to be related to that.
AM
Ammie
1 year ago
C'mon, FIPS is the way to go. It's like the security version of a Swiss Army knife - does it all!
AL
Aliza
1 year ago
FITSAF? Sounds like a typo to me. I'm going with TCSEC, the tried and true classic.
TY
Tyra
1 year ago
Yeah, TCSEC is a solid choice for assessing computer security controls.
VI
Vi
1 year ago
TCSEC is a well-known standard for assessing computer security controls.
TE
Tenesha
1 year ago
I think TCSEC is the most reliable option out of the choices given.
SH
Shaquana
1 year ago
I agree, FITSAF does sound like a typo. TCSEC is definitely the classic choice.
TR
Tricia
1 year ago
FIPS sounds like a fancy way to say 'Fancy Internet Protocol Standard' to me. But hey, what do I know?
AN
Annita
1 year ago
Oh, I see. Thanks for clarifying that. So, which one do you think is the correct answer?
BE
Bettye
1 year ago
FIPS does sound fancy, but it actually stands for Federal Information Processing Standards.
CL
Claudio
1 year ago
D) FITSAF
AN
Anna
1 year ago
C) FIPS
TU
Tula
1 year ago
B) TCSEC
HA
Haley
1 year ago
A) SSAA
RI
Ricarda
1 year ago
TCSEC, of course! That's the gold standard for computer security controls. Gotta love those fancy acronyms.
LY
Lynette
1 year ago
FITSAF is not as well-known as TCSEC or FIPS, but it's still important to understand different standards.
GI
Gianna
1 year ago
FIPS is also a good standard to consider when assessing computer security controls.
CE
Celestina
1 year ago
I agree, TCSEC is definitely the gold standard for computer security controls.
LA
Laine
2 years ago
I'm not sure, but I think TCSEC could also be a possible answer.
CO
Coletta
2 years ago
I agree with Tamar, FIPS is a standard for assessing computer security controls.
TA
Tamar
2 years ago
I think the answer is C) FIPS.