CSSLP Domain 4 - Secure Software
Implementation-Coding Questions and
Complete Solutions Graded A+
Software developers writes software programs PRIMARILY to
A. create new products
B. capture market share
C. solve business problems
D. mitigate hacker threats - Answer: C. solve business problems
The process of combining necessary functions, variable and dependency files and libraries required for
the machine to run the program is referred to as
A. compilation
B. interpretation
C. linking
D. instatiation - Answer: C. linking
Which of the following is an important consideration to manage memory and mitigate overflow attacks
when choosing a programming language?
A. Locality of reference
B. Type safety
C. Cyclomatic complexity
D. Parametric polymorphism - Answer: B. Type safety
Assembly and machine language are examples of
A. natural language
B. very high-level language (VHLL)
C. high-level language
D. low-level language - Answer: D. low-level language
, Using multifactor authentication is effective in mitigating which of the following application security
risks?
A. Injection flaws
B. Cross-site Scripting (XSS)
C. Buffer overflow
D. Man-in-the-Middle (MITM) - Answer: D. Man-in-the-Middle (MITM)
Impersonation attacks such as Man-in-the-Middle (MITM) attacks in an Internet application can be BEST
mitigated using proper
A. Configuration Management
B. Session Management
C. Patch Management
D. Exception Management - Answer: B. Session Management
Implementing Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA)
protection is a means of defending against
A. SQL Injection
B. Cross-Site Scripting (XSS)
C. Cross-Site Request Forgery (CSRF)
D. Insecure cryptographic storage - Answer: C. Cross-Site Request Forgery (CSRF)
The findings of a code review indicate that cryptographic operations in code use the Rijndael cipher,
which is the original publication of which of the following algorithms?
A. Skipjack
B. Data Encryption Standard (DES)
C. Triple Data Encryption Standard (3DES)
D. Advanced Encryption Standard (AES) - Answer: D. Advanced Encryption Standard (AES)
Implementation-Coding Questions and
Complete Solutions Graded A+
Software developers writes software programs PRIMARILY to
A. create new products
B. capture market share
C. solve business problems
D. mitigate hacker threats - Answer: C. solve business problems
The process of combining necessary functions, variable and dependency files and libraries required for
the machine to run the program is referred to as
A. compilation
B. interpretation
C. linking
D. instatiation - Answer: C. linking
Which of the following is an important consideration to manage memory and mitigate overflow attacks
when choosing a programming language?
A. Locality of reference
B. Type safety
C. Cyclomatic complexity
D. Parametric polymorphism - Answer: B. Type safety
Assembly and machine language are examples of
A. natural language
B. very high-level language (VHLL)
C. high-level language
D. low-level language - Answer: D. low-level language
, Using multifactor authentication is effective in mitigating which of the following application security
risks?
A. Injection flaws
B. Cross-site Scripting (XSS)
C. Buffer overflow
D. Man-in-the-Middle (MITM) - Answer: D. Man-in-the-Middle (MITM)
Impersonation attacks such as Man-in-the-Middle (MITM) attacks in an Internet application can be BEST
mitigated using proper
A. Configuration Management
B. Session Management
C. Patch Management
D. Exception Management - Answer: B. Session Management
Implementing Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA)
protection is a means of defending against
A. SQL Injection
B. Cross-Site Scripting (XSS)
C. Cross-Site Request Forgery (CSRF)
D. Insecure cryptographic storage - Answer: C. Cross-Site Request Forgery (CSRF)
The findings of a code review indicate that cryptographic operations in code use the Rijndael cipher,
which is the original publication of which of the following algorithms?
A. Skipjack
B. Data Encryption Standard (DES)
C. Triple Data Encryption Standard (3DES)
D. Advanced Encryption Standard (AES) - Answer: D. Advanced Encryption Standard (AES)
