Free ISC2 CSSLP Exam Questions

Become ISC2 Certified with updated CSSLP exam questions and correct answers

Page: 1 / 155

Total 774 Questions | Updated On: Sep 22, 2026

Add To Cart

Question 1

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to?

A : onymous

B : tual

C : lti-factor

D : ometrics

Answer: C

Question 2

What is a common language to enumerate software vulnerabilities?

A : CVSS

B : OWASP

C : CVE

D : CWE

Answer: C

Question 3

Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.

A : T

B : fice of Management and Budget (OMB)

C : PS

D : MA

Answer: B,D

Question 4

Which of the following best describes the identification of undocumented software functionality?

A : Testing the software against known vulnerabilities and exploits to uncover hidden features

B : Conducting a thorough code review to identify any hidden or unaccounted functionality

C : Collaborating with end-users and conducting user acceptance tests to identify any unplanned functionality

D : Analyzing system logs and error messages to detect any unexpected behavior

Answer: C

Question 5

The attack surface of software is the code within the system that can be:

A : Run without user permission

B : Leads to buffer overflows and injection attacks

C : All answers are correct

D : Accessed by unauthorized parties

Answer: D

Page: 1 / 155

Total 774 Questions | Updated On: Sep 22, 2026

Add To Cart