Verify Successful Implementation ISSEP Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   Which item is typically included as evidence in stakeholder acceptance documentation?

   • ASigned approval forms from authorized stakeholders
   • BThe complete source code of the system
   • CA list of all system users
   • DThe system's network diagram
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   During the execution of a security test plan for a new cloud-based application, the test team discovers that the data encryption at rest is not enabled for the database, contrary to the security requirements. The test lead must coordinate with stakeholders to address this finding. What should the test lead do first?

   • ADocument the finding and report it to the system owner and security officer for a decision on remediation.
   • BAsk the database administrator to fix the issue without documenting it.
   • CIgnore the finding because it is a configuration issue that can be fixed later.
   • DImmediately enable encryption on the database and continue testing.
   Reveal Solution Discussion Select an answer first