Free ISC2 CSSLP Exam Questions

Become ISC2 Certified with updated CSSLP exam questions and correct answers

Page: 1 / 155

Total 774 Questions | Updated On: Sep 22, 2026

Add To Cart

Question 1

What does black-box testing focus on?

A : The behavioral characteristics of the test object given certain inputs

B : The known performance factors of the test object rather than security

C : The interaction of components in the system given certain inputs

D : Whether the system exhibits characteristics of failure

Answer: A

Question 2

Quantitative risk assessment differs from qualitative risk assessment in that it predicts attacks based on what?

A : Penetration tests

B : Historical loss information

C : Projections based on qualitative factors

D : Zero-day loss information

Answer: B

Question 3

Which of the following best describes the identification of undocumented software functionality?

A : Testing the software against known vulnerabilities and exploits to uncover hidden features

B : Conducting a thorough code review to identify any hidden or unaccounted functionality

C : Collaborating with end-users and conducting user acceptance tests to identify any unplanned functionality

D : Analyzing system logs and error messages to detect any unexpected behavior

Answer: C

Question 4

With imperative programming, the security implementation is:

A : Well-defined and commonly recognized

B : Embedded in a container in which rules are configured as part of deployment

C : Embedded into the code itself

D : Specified in a set of well-defined actions

Answer: C

Question 5

A Web-based credit card company had collected financial and personal details of Mark before issuing him a credit card. The company has now provided Mark's financial and personal details to another company. Which of the following Internet laws has the credit card issuing company violated?

A : ademark law

B : curity law

C : ivacy law

D : pyright law

Answer: C

Page: 1 / 155

Total 774 Questions | Updated On: Sep 22, 2026

Add To Cart