Develop System Requirements ISSEP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which characteristic is essential for a System Security Requirements Baseline?

   • AIt is agreed upon by stakeholders and captures security needs and constraints
   • BIt is developed after system implementation
   • CIt contains only technical security requirements
   • DIt is updated daily to reflect minor changes
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A defense agency is developing a new drone system that must operate in GPS-denied environments. The security team is writing the Security CONOPS. Which of the following should be included in the CONOPS?

   • AA description of how the drone will navigate and communicate securely without GPS.
   • BA detailed design of the encryption algorithms used in the drone's communication system.
   • CA list of all security requirements with traceability to system objectives.
   • DA risk assessment of all potential threats to the drone system.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A smart grid company is developing a new control system for remote substations. The system will operate in isolated environments with limited physical access. The security team is defining the system security context. Which of the following is the most critical input to this effort?

   • AA diagram of the system's network architecture.
   • BA list of all potential security requirements from similar systems.
   • CA detailed description of the operational environment, including physical and cyber threats.
   • DA copy of the organization's security policy.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   During the system security context development, which activity is primarily performed to establish the context for security requirements?

   • AIdentifying the system's operational environment, stakeholders, and security constraints
   • BPerforming a cost-benefit analysis of security investments
   • CWriting detailed test procedures for security verification
   • DSelecting specific security controls from a catalog
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What does security requirements analysis primarily ensure about the requirements?

   • AThey are complete, consistent, feasible, and traceable
   • BThey are approved by the system owner
   • CThey are written in a specific format
   • DThey are free of any cost constraints
   Reveal Solution Discussion Select an answer first