Question 1

The operations phase of the software lifecycle is characterized by what?

Options :

A : It begins when software is released from development.

B : It begins with the development of the program requirements.

C : The response team is the process manager.

D : The development team is the process manager.

Answer: A

Question 2

Which operational practices are essential for ensuring secure software development and maintaining the security of an organization’s systems and data?

Options :

A : Incident response planning, vendor management, and encryption techniques

B : Change management, vulnerability scanning, and network segmentation

C : Assessment and Authorization (A&A) process, code review, and data backup

D : Configuration management, user access controls, and system patching

Answer: C

Question 3

Inside a trust boundary, what do items do?

Options :

A : Share the same user account

B : Are not observable

C : Share the same ACL access

D : Share the same privileges, rights, access, and identifiers

Answer: D

Question 4

What are the security advantages of virtualization, as described in the NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards"? Each correct answer represents a complete solution. Choose three

Options :

A : It increases capabilities for fault tolerant computing

B : It adds a layer of security for defense-in-depth

C : It decreases exposure of weak software

D : It decreases configuration effort

Answer: A,B,C

Question 5

You work as a Network Administrator for uCertify Inc. You need to secure web services of your company in order to have secure transactions. Which of the following will you recommend for providing security?

Options :

A : SSL

B : VPN

C : S/MIME

D : HTTP

Answer: A

Free CSSLP Mock Exam – Practice Online Confidently

Buying Options: