Free ISC2 CSSLP Exam Questions

Become ISC2 Certified with updated CSSLP exam questions and correct answers

Page: 1 / 155

Total 774 Questions | Updated On: Feb 19, 2025

Add To Cart

Question 1

To ensure the secure maintenance of the product, it is necessary to subject all patch requests to what? (Choose all that apply.)

A : Change control processes

B : Regression testing

C : Full functional testing

D : Risk analysis

Answer: A,D

Question 2

Which of the following statements about secure backup and restoration planning is correct?

A : In case of a system failure, create a disaster recovery plan that not only involves restoring data but also includes procedures for notifying the affected individuals, plans for mitigating further damage from data loss, and means for storing and retrieving the data securely.

B : In the world of cloud computing, the concept of creating backups is now an outmoded way of thinking. Merely make sure that all your databases create hot copies of the data in a secure cloud storage system for data recovery.

C : When creating backups, use a fast network connection to ensure that all data is backed up and to limit the time data is in motion.

D : When creating a plan for backup and restoration, you must consider that the cost of this action may exceed your normal operating budget.

Answer: A

Question 3

The attack surface of software is the code within the system that can be:

A : Run without user permission

B : Leads to buffer overflows and injection attacks

C : All answers are correct

D : Accessed by unauthorized parties

Answer: D

Question 4

When considering software security requirements, which operations correctly categorize functional and non-functional requirements?

A : Functional: security, operational, continuity, deployment. Non-functional: business requirements, use cases, stories

B : Functional: security, operational, deployment. Non-functional: business requirements, uses case, stories.

C : Functional: business requirements, use cases, stories. Non-functional: security, operational, deployment.

D : Functional: business requirements, use cases, stories. Non-functional: security, operational, continuity, deployment.

Answer: D

Question 5

Which of the following should be done throughout development? (Choose all that apply.)

A : Attack surface analysis

B : Threat models

C : Managed code

D : Cryptographic agility

Answer: A,B

Page: 1 / 155

Total 774 Questions | Updated On: Feb 19, 2025

Add To Cart