Free ISC2 CSSLP Exam Questions

Become ISC2 Certified with updated CSSLP exam questions and correct answers

Page: 1 / 155

Total 774 Questions | Updated On: Jan 07, 2025

Add To Cart

Question 1

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

A : nial-of-service attack

B : ctionary attack

C : n-in-the-middle attack

D : word guessing attack

Answer: C

Question 2

What is a common language to enumerate software vulnerabilities?

A : CVSS

B : OWASP

C : CVE

D : CWE

Answer: C

Question 3

The fundamental approach to security in which an object has only the necessary rights and privileges to perform its task with no additional permissions is a description of what?

A : Layered security

B : Role-based security

C : Least privilege

D : Clark-Wilson model

Answer: B

Question 4

Which of the following is an important aspect to consider when creating an End-User License Agreement (EULA)?

A : Including complex legal terminology to ensure enforceability

B : Limiting the liability of the software vendor to the maximum extent possible

C : Clearly defining the permitted uses and restrictions of the software

D : Redacting any mention of user rights and restrictions

Answer: C

Question 5

Microsoft software security expert Michael Howard defines some heuristics for determining code review in "A Process for Performing Security Code Reviews". Which of the following heuristics increase the application's attack surface? Each correct answer represents a complete solution. Choose all that apply

A : de written in C/C++/assembly language

B : de listening on a globally accessible network interface

C : de that changes frequently

D : onymously accessible code

E : de that runs by default

F : de that runs in elevated context

Answer: A,B,D

Page: 1 / 155

Total 774 Questions | Updated On: Jan 07, 2025

Add To Cart