Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 2 Question 72 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 72
Topic #: 2
[All ISSEP Questions]

Which of the following are the phases of the Certification and Accreditation (C&A) process Each correct answer represents a complete solution. Choose two.

Show Suggested Answer Hide Answer
Suggested Answer: B

The types of cryptography defined by FIPS 185 are as follows:

Type I cryptography: It describes a cryptographic algorithm or a tool accepted by the National

Security Agency for protecting classified

information.

Type II cryptography: It describes a cryptographic algorithm or a tool accepted by the National

Security Agency for protecting

sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States

Code, or Section 3502(2) of Title

44, United States Code.

Type III cryptography: It describes a cryptographic algorithm or a tool accepted as a Federal

Information Processing Standard.

Type III (E) cryptography: It describes a Type III algorithm or a tool that is accepted for export from

the United States.


Contribute your Thoughts:

0/2000 characters
Jaime
5 months ago
Really? I’m surprised that Detection isn’t one of the main phases!
upvoted 0 times
...
My
5 months ago
I thought Auditing was a phase too, but I guess not.
upvoted 0 times
...
Orville
5 months ago
Wait, isn't Continuous Monitoring just part of the process?
upvoted 0 times
...
Veda
5 months ago
Totally agree, B and C make sense!
upvoted 0 times
...
Alverta
6 months ago
I think B and C are the right phases.
upvoted 0 times
...
Kara
6 months ago
I’m leaning towards Continuous Monitoring and Initiation, but I could be mixing it up with another framework.
upvoted 0 times
...
Lonna
6 months ago
I practiced a similar question, and I think Auditing might be part of the process too, but I’m not entirely confident.
upvoted 0 times
...
Margurite
6 months ago
I remember studying the phases, and I feel like Initiation was one of them. It sounds familiar, but I can't recall the details.
upvoted 0 times
...
Jutta
6 months ago
I think the C&A process definitely includes Continuous Monitoring, but I'm not sure about the second option.
upvoted 0 times
...
Lenna
6 months ago
This is a good question to test our understanding of Android app security. I'll use the process of elimination to narrow down the options and make an educated guess if I'm not completely sure.
upvoted 0 times
...
Iraida
6 months ago
Hmm, I'm a bit unsure about this one. I know SIP is a common VoIP protocol, but I'm not sure if it's the one specifically used between a SIP server and softswitch. I'll have to think this through carefully.
upvoted 0 times
...
Gladys
6 months ago
This seems similar to a practice question we did where focusing on link failure detection was key. I think BFD could be the best option here.
upvoted 0 times
...
Phillip
11 months ago
I'm pretty sure the C&A process is more like a spy thriller than an audit. Initiation, continuous monitoring, and a healthy dose of paranoia.
upvoted 0 times
...
Herschel
11 months ago
Ah, the C&A process - a never-ending dance of forms, signatures, and approvals. B and C are the steps, the rest are just side-steps.
upvoted 0 times
Thad
9 months ago
Yes, it's important to remember that auditing and detection are also crucial components of the C&A process.
upvoted 0 times
...
Tequila
9 months ago
D) Detection
upvoted 0 times
...
Lucia
9 months ago
A) Auditing
upvoted 0 times
...
Kaycee
10 months ago
I know, the C&A process can be quite tedious. But B and C are definitely the main steps to focus on.
upvoted 0 times
...
Otis
10 months ago
C) Continuous Monitoring
upvoted 0 times
...
Jaclyn
10 months ago
B) Initiation
upvoted 0 times
...
...
Elza
11 months ago
Auditing? Really? That's not a phase of the C&A process. I'd stick with the classic initiation and continuous monitoring.
upvoted 0 times
Thad
10 months ago
Detection is also a key phase in the C&A process.
upvoted 0 times
...
Dexter
11 months ago
I agree, initiation and continuous monitoring are important phases.
upvoted 0 times
...
Tamekia
11 months ago
Auditing is actually one of the phases of the C&A process.
upvoted 0 times
...
...
Aleisha
12 months ago
Hmm, I'm not sure about D - detection doesn't really fit with the other phases. I'd go with B and C.
upvoted 0 times
Kris
10 months ago
Initiation and Continuous Monitoring are key steps in C&A.
upvoted 0 times
...
Juliann
10 months ago
Auditing and Continuous Monitoring are essential in the process.
upvoted 0 times
...
Alana
11 months ago
I agree, detection doesn't seem to fit in the C&A process.
upvoted 0 times
...
Yuette
11 months ago
I think B and C are the correct phases.
upvoted 0 times
...
Hillary
11 months ago
Initiation is crucial to kick off the process.
upvoted 0 times
...
Lavonne
11 months ago
Auditing and Continuous Monitoring are definitely important.
upvoted 0 times
...
Tori
11 months ago
I agree, detection doesn't seem to fit in the C&A process.
upvoted 0 times
...
Refugia
11 months ago
I think B and C are the correct phases.
upvoted 0 times
...
...
Sena
12 months ago
B and C seem like the right answers here. The C&A process definitely involves initiation and continuous monitoring.
upvoted 0 times
...
Gary
12 months ago
I'm not sure about Detection. I think Continuous Monitoring is also a phase in the C&A process.
upvoted 0 times
...
Vilma
1 year ago
I agree with Thad. Auditing and Initiation make sense for the C&A process.
upvoted 0 times
...
Thad
1 year ago
I think A) Auditing and B) Initiation are the phases of the C&A process.
upvoted 0 times
...

Save Cancel