Free ISC2 CSSLP Exam Questions

Become ISC2 Certified with updated CSSLP exam questions and correct answers

Page: 1 / 155

Total 774 Questions | Updated On: Nov 19, 2024

Add To Cart

Question 1

The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include? Each correct answer represents a part of the solution. Choose all that apply

A : mediation of a particular vulnerability

B : t-benefit examination of countermeasures

C : entification of vulnerabilities

D : essment of attacks

Answer: B,C,D

Question 2

Access control is:

A : All answers are correct

B : Not the same as authorization, but the two go hand in hand

C : Another word for authorization

Answer: B

Question 3

A critical part of system construction is:

A : Understanding the right approach to design

B : Understanding the role of each interface in protecting a module

C : Ensuring that all modules embody proper cohesion

D : Understanding the interactions between modules

Answer: B

Question 4

The fundamental approach to security in which an object has only the necessary rights and privileges to perform its task with no additional permissions is a description of what?

A : Layered security

B : Role-based security

C : Least privilege

D : Clark-Wilson model

Answer: B

Question 5

Which of the following phases of DITSCAP includes the activities that are necessary for the continuing operation of an accredited IT system in its computing environment and for addressing the changing threats that a system faces throughout its life cycle?

A : ase 2, Verification

B : ase 3, Validation

C : ase 1, Definition

D : ase 4, Post Accreditation Phase

Answer: D

Page: 1 / 155

Total 774 Questions | Updated On: Nov 19, 2024

Add To Cart