Free ISC2 CSSLP Exam Questions

Become ISC2 Certified with updated CSSLP exam questions and correct answers

Page: 1 / 155

Total 774 Questions | Updated On: Sep 09, 2025

Add To Cart

Question 1

You work as a project manager for BlueWell Inc. You are preparing to plan risk responses for your project with your team. How many risk response types are available for a negative risk event in the project?

A : ree

B : ven

C :

D : ur

Answer: D

Question 2

According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply

A : Vulnerability and Incident Management

B : formation systems acquisition, development, and maintenance

C : Security Design & Configuration

D : Enclave and Computing Environment

Answer: A,C,D

Question 3

Microsoft software security expert Michael Howard defines some heuristics for determining code review in "A Process for Performing Security Code Reviews". Which of the following heuristics increase the application's attack surface? Each correct answer represents a complete solution. Choose all that apply

A : de written in C/C++/assembly language

B : de listening on a globally accessible network interface

C : de that changes frequently

D : onymously accessible code

E : de that runs by default

F : de that runs in elevated context

Answer: A,B,D

Question 4

A public key infrastructure (PKI) allows:

A : Organizations to communicate securely

B : Encrypted authentication

C : All answers are correct

D : The passing of digital certificates

Answer: C

Question 5

Static analysis should be used to check for what?

A : Approved function/library calls, examining rules and semantics associated with logic, and thread performance management

B : Syntax, approved function/library calls, and memory management

C : Syntax, approved function/library calls, and race conditions

D : Syntax, approved function/library calls, and examining rules and semantics associated with logic and calls

Answer: D

Page: 1 / 155

Total 774 Questions | Updated On: Sep 09, 2025

Add To Cart