Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 5 Question 53 Discussion

Posted by Annelle on Jun 25, 2022 at 09:33 AM

Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.

Suggested Answer: A, C

FISMA and Office of Management and Budget (OMB) require all general support systems and major

applications to be fully certified and

accredited before they are put into production. General support systems and major applications are

also referred to as information systems

and are required to be reaccredited every three years.

Answer option B is incorrect. The National Institute of Standards and Technology (NIST), known

between 1901 and 1988 as the National

Bureau of Standards (NBS), is a measurement standards laboratory which is a non-regulatory agency

of the United States Department of

Commerce. The institute's official mission is to promote U.S. innovation and industrial

competitiveness by advancing measurement science,

standards, and technology in ways that enhance economic security and improve quality of life.

Answer option D is incorrect. The Federal Information Processing Standards (FIPS) are publicly

announced standards developed by the United

States federal government for use by all non-military government agencies and by government

contractors. Many FIPS standards are modified

Some FIPS standards were originally developed by the U.S. government. For instance, standards for

encoding data (e.g., country codes), but

more significantly some encryption standards, such as the Data Encryption Standard (FIPS 46-3) and

the Advanced Encryption Standard (FIPS

197). In 1994, NOAA (Noaa) began broadcasting coded signals called FIPS (Federal Information

Processing System) codes along with their

standard weather broadcasts from local stations. These codes identify the type of emergency and

the specific geographic area (such as a

county) affected by the emergency.


Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
HA
Harris 11 months ago
Wait, all of them need to be certified? That seems excessive!
KR
Kris 11 months ago
I agree, NIST and FISMA are must-haves!
TH
Thurman 12 months ago
FIPS? Not sure if that one applies here.
KR
Kris 12 months ago
I think OMB is also involved, right?
CA
Carlee 12 months ago
Definitely NIST and FISMA! They’re key for certifying systems.
KR
Kristofer 1 year ago
I feel like OMB might be involved too, but I can't recall the specifics on their role in certification.
WI
William 1 year ago
I'm not too sure about FISMA, but I remember it has something to do with federal information security.
KI
Kimberlie 1 year ago
I think NIST is definitely one of the correct answers since they set the standards for security and accreditation.
ER
Erinn 1 year ago
FIPS seems more related to standards rather than the accreditation process, so I'm leaning towards excluding that one.
CH
Charolette 1 year ago
I feel like cost is always a concern, but I would prioritize forecasting capabilities to ensure accuracy across different time frames.
LE
Leana 1 year ago
Hmm, this seems like a tricky one. I'll need to think through the dependencies carefully to make sure the installation and safety inspection are executed in the right order.
PA
Pamela 1 year ago
Okay, I've got this. Agnostic and reusable is the way to go - that's the core of a well-designed service.
MI
Michal 1 year ago
Hmm, the options cover a range of software development strategies. I'll need to carefully consider which one best describes Cisco's approach.
0/2000 characters

Save Cancel