Question 1

Which operational practices are essential for ensuring secure software development and maintaining the security of an organization’s systems and data?

Options :

A : Incident response planning, vendor management, and encryption techniques

B : Change management, vulnerability scanning, and network segmentation

C : Assessment and Authorization (A&A) process, code review, and data backup

D : Configuration management, user access controls, and system patching

Answer: C

Question 2

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

Options :

A : Denial-of-service attack

B : Dictionary attack

C : Man-in-the-middle attack

D : Password guessing attack

Answer: C

Question 3

Which of the following are controls that can be used to ensure software authenticity? (Choose all that apply.)

Options :

A : Specifications

B : Hash values

C : Nonrepudiation of origin

D : License keys

Answer: B,C

Question 4

Access control is:

Options :

A : All answers are correct

B : Not the same as authorization, but the two go hand in hand

C : Another word for authorization

Answer: B

Question 5

The key to ensuring that every module in the system is operating correctly is what? (Choose all that apply.)

Options :

A : Ensuring proper interface design

B : Staying on top of changes

C : Designer creativity

D : Ensuring proper valid inputs

Answer: A,D

Free CSSLP Mock Exam – Practice Online Confidently

Buying Options: