MENU
Which of the following are the phases of the Certification and Accreditation (C&A) process Each correct answer represents a complete solution. Choose two.
Suggested Answer: B
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The types of cryptography defined by FIPS 185 are as follows:
Type I cryptography: It describes a cryptographic algorithm or a tool accepted by the National
Security Agency for protecting classified
information.
Type II cryptography: It describes a cryptographic algorithm or a tool accepted by the National
Security Agency for protecting
sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States
Code, or Section 3502(2) of Title
44, United States Code.
Type III cryptography: It describes a cryptographic algorithm or a tool accepted as a Federal
Information Processing Standard.
Type III (E) cryptography: It describes a Type III algorithm or a tool that is accepted for export from
the United States.
37 comments · newest first
JA
Jaime
11 months ago
Really? I’m surprised that Detection isn’t one of the main phases!
MY
My
11 months ago
I thought Auditing was a phase too, but I guess not.
OR
Orville
11 months ago
Wait, isn't Continuous Monitoring just part of the process?
VE
Veda
11 months ago
Totally agree, B and C make sense!
AL
Alverta
12 months ago
I think B and C are the right phases.
KA
Kara
12 months ago
I’m leaning towards Continuous Monitoring and Initiation, but I could be mixing it up with another framework.
LO
Lonna
12 months ago
I practiced a similar question, and I think Auditing might be part of the process too, but I’m not entirely confident.
MA
Margurite
1 year ago
I remember studying the phases, and I feel like Initiation was one of them. It sounds familiar, but I can't recall the details.
JU
Jutta
1 year ago
I think the C&A process definitely includes Continuous Monitoring, but I'm not sure about the second option.
LE
Lenna
1 year ago
This is a good question to test our understanding of Android app security. I'll use the process of elimination to narrow down the options and make an educated guess if I'm not completely sure.
IR
Iraida
1 year ago
Hmm, I'm a bit unsure about this one. I know SIP is a common VoIP protocol, but I'm not sure if it's the one specifically used between a SIP server and softswitch. I'll have to think this through carefully.
GL
Gladys
1 year ago
This seems similar to a practice question we did where focusing on link failure detection was key. I think BFD could be the best option here.
PH
Phillip
1 year ago
I'm pretty sure the C&A process is more like a spy thriller than an audit. Initiation, continuous monitoring, and a healthy dose of paranoia.
HE
Herschel
1 year ago
Ah, the C&A process - a never-ending dance of forms, signatures, and approvals. B and C are the steps, the rest are just side-steps.
TH
Thad
1 year ago
Yes, it's important to remember that auditing and detection are also crucial components of the C&A process.
TE
Tequila
1 year ago
D) Detection
LU
Lucia
1 year ago
A) Auditing
KA
Kaycee
1 year ago
I know, the C&A process can be quite tedious. But B and C are definitely the main steps to focus on.
OT
Otis
1 year ago
C) Continuous Monitoring
JA
Jaclyn
1 year ago
B) Initiation
EL
Elza
1 year ago
Auditing? Really? That's not a phase of the C&A process. I'd stick with the classic initiation and continuous monitoring.
TH
Thad
1 year ago
Detection is also a key phase in the C&A process.
DE
Dexter
1 year ago
I agree, initiation and continuous monitoring are important phases.
TA
Tamekia
1 year ago
Auditing is actually one of the phases of the C&A process.
AL
Aleisha
1 year ago
Hmm, I'm not sure about D - detection doesn't really fit with the other phases. I'd go with B and C.
KR
Kris
1 year ago
Initiation and Continuous Monitoring are key steps in C&A.
JU
Juliann
1 year ago
Auditing and Continuous Monitoring are essential in the process.
AL
Alana
1 year ago
I agree, detection doesn't seem to fit in the C&A process.
YU
Yuette
1 year ago
I think B and C are the correct phases.
HI
Hillary
1 year ago
Initiation is crucial to kick off the process.
LA
Lavonne
1 year ago
Auditing and Continuous Monitoring are definitely important.
TO
Tori
1 year ago
I agree, detection doesn't seem to fit in the C&A process.
RE
Refugia
1 year ago
I think B and C are the correct phases.
SE
Sena
1 year ago
B and C seem like the right answers here. The C&A process definitely involves initiation and continuous monitoring.
GA
Gary
1 year ago
I'm not sure about Detection. I think Continuous Monitoring is also a phase in the C&A process.
VI
Vilma
2 years ago
I agree with Thad. Auditing and Initiation make sense for the C&A process.
TH
Thad
2 years ago
I think A) Auditing and B) Initiation are the phases of the C&A process.