- Study guides, Class notes & Summaries

Which access control mechanism provides the owner of an object the opportunity to determine the access control permissions for other subjects? a. Mandatory b. Role-based c. Discretionary d. Token-based - Discretionary The elements UDI and CDI are associated with which access control model? a. Mandatory access control b. Clark-Wilson c. Biba integrity d. Bell-LaPadula confidentiality - Clark-Wilson The concept of separating elements of a system to prevent inadvertent information sharin...

-

67 pages

Written in 2023/2024

Grade A+

BESTSOLUTIONGURU

CSSLP Bundled Exams Questions and Answers 100% Verified and Updated | Graded A

-

15 items

EmilyCharlene

Official (ISC)² CSSLP - Domain 1: Secure Software Concepts Exam Questions and Answers 100% Correct Accountability - Correct Answer ️️ -A security concept that protects against repudiation threats. Auditing - Correct Answer ️️ -A security concept that addresses the logging of transactions so that at a later time a history of transactions can be built, if needed. It answers the question, "Who (subject) did what (action) when (timestamp) and where (object)?" Authentication - Cor...

-

3 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Domain 4 - Secure Software Implementation/Coding Exam Questions and Answers 100% Pass Software developers writes software programs PRIMARILY to A. create new products B. capture market share C. solve business problems D. mitigate hacker threats - Correct Answer ️️ -C. solve business problems The process of combining necessary functions, variable and dependency files and libraries required for the machine to run the program is referred to as A. compilation B. interpretation C...

-

7 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Domain 6 - Software Acceptance Exam Questions and Answers 100% Correct Your organization has the policy to attest the security of any software that will be deployed into the production environment. A third party vendor software is being evaluated for its readiness to be deployed. Which of the following verification and validation mechanism can be employed to attest the security of the vendor's software? A. Source code review B. Threat modeling the software C. Black box testing D....

-

4 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP - Domain 2: Secure Software Requirements Exam Questions and Answers 100% Pass Abuse case - Correct Answer ️️ -An analysis technique that models the unintended behavior of the software or system by taking a hostile user perspective. CRUD (create, read, update, delete) - Correct Answer ️️ -The four primary procedures or ways a system can manipulate information. Data Lifecycle Management - Correct Answer ️️ -A policy-based approach to managing the flow of a...

-

2 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Exam Guide with 100% Complete Solutions Which access control mechanism provides the owner of an object the opportunity to determine the access control permissions for other subjects? a. Mandatory b. Role-based c. Discretionary d. Token-based - Correct Answer ️️ -Discretionary The elements UDI and CDI are associated with which access control model? a. Mandatory access control b. Clark-Wilson c. Biba integrity d. Bell-LaPadula confidentiality - Correct Answer ️️ -Clark-Wil...

-

75 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Domain 5 - Secure Software Testing Exam Questions and Answers 100% Pass The ability of the software to restore itself to expected functionality when the security protection that is built in is breached is also known as A. redundancy B. recoverability C. resiliency D. reilability - Correct Answer ️️ -B. recoverability In which of the following software development methodologies does unit testing enable collective code ownership and is critical to assure software assurance? A. ...

-

7 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Domain 1 - Secure Software Concepts Questions and Answers 100% Pass The PRIMARY reason for incorporating security into the software development life cycle is to protect A. the unauthorized disclosure of information. B. the corporate brand and reputation. C. against hackers who intend to misuse the software. D. the developers from releasing software with security defects. - Correct Answer ️️ - B. the corporate brand and reputation The resiliency of software to withstand attacks...

-

7 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP - Domain 7: Software Deployment, Operations, Maintenance and Disposal Exam Questions and Answers 100% Pass Audits - Correct Answer ️️ -Monitoring mechanisms by which an organization can ascertain the assurance aspects of the network, systems, and software that they have built or bought. Cause mapping - Correct Answer ️️ -A problem solving method that draws out, visually, the multiple chains of interconnecting causes that lead to an incident. The method, wh...

-

2 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP - Domain 5: Secure Software Testing Exam Questions and Answers 100% Pass Attack surface validation - Correct Answer ️️ -Determining if the software has exploitable weakness (attack surface). Black box test - Correct Answer ️️ -Usually described as focusing on testing functional requirements. Functional testing - Correct Answer ️️ -Software testing is performed primarily to attest to the functionality of the software as expected by the business or custom...

-

2 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Sample Exam (2024) Questions and Answers 100% Pass QUESTION 1 An organization has signed a contract to build a large Information System (IS) for the United States government. Which framework, guideline, or standard would BEST meet government information processing requirements? A. Control Objectives for Information and Related Technology (COBIT) B. Information Technology Infrastructure Library (ITIL) C. National Institute of Standards and Technology (NIST) D. International Organiz...

-

198 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP - Chapter 3: Secure Software Requirements Domain Questions and Answers 100% Correct Attack Patterns - Correct Answer ️️ -A reference to the conceptual pattern and description of how a particular type of attack is implemented. Common Attack Pattern Enumeration and Classification (CAPEC) - Correct Answer ️️ -A repository and dictionary of commonly known patterns of attack used for exploitation. Data Anonymization - Correct Answer ️️ -The process of saniti...

-

3 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP - Domain 3: Secure Software Design Questions and Answers 100% Pass 3-Tier architecture - Correct Answer ️️ -A form of distributed computing in which client intelligence is moved to a middle tier so that stateless clients can be used. Client-server architecture - Correct Answer ️️ -A form of distributed computing in which client code contacts the server for data, then formats and displays it to the use. Input from the client is committed back to the server whe...

-

3 pages

Written in 2023/2024

Grade A+

EmilyCharlene

CSSLP Domain 2 - Secure Software Requirements Questions and Answers 100% Pass Which of the following MUST be addressed by software security requirements? Choose the BEST answer. A. Technology used in building the application B. Goals and objectives of the organization C. Software quality requirements. D. External auditor requirements - Correct Answer ️️ -B. Goals and objectives of the organization Which of the following types of information is exempt from confidentiality requirement...

-

8 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP Domain 1: Secure Software Concepts Exam Questions and Answers 100% Pass One-way hash - Correct Answer ️️ -A reference to hash functions that make it easy to go in one direction and computationally infeasible to go in the opposite direction. Safeguard - Correct Answer ️️ -A reference to physical, administrative, or technical security controls used to protect assets. Safeguards are proactive in nature. Software development lifecycle (SDLC) - Correct Answer ️...

-

2 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Official (ISC)² CSSLP Domain 7: Software Deployment, Operations, and Maintenance Exam Questions and Answers 100% Pass Authorization to operate - Correct Answer ️️ -The official management decision given by a senior organizational official to authorize operation of an information system and to explicitly accept the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation based on the...

-

3 pages

Written in 2023/2024

Grade A+

EmilyCharlene

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one? A. Configuration Identification B. Configuration Verification and Auditing C. Configuration Status Accounting D. Configuration Item CostingD Section: (no...

-

463 pages

Written in 2023/2024

Grade A+

STANFORDGRADESS

testtest workthe transfer of energy that occurs when a force makes an object move matttesttest 2 Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

-

464 pages

Written in 2023/2024

Grade A+

STANFORDGRADESS

____ is an architecture that can mimic desktop applications in usability and function. A. RIA B. NFC C. REST D. SOAPA. Rich Internet applications (RIAs) are a form of architecture using the Web as a transfer mechanism and the client as a processing device, typically for display formatting control functions. _____ is a selected collection of elements into a designed solution stack for a specific problem. A. Infrastructure as a Service B. Platform as a Service C. Software as a Servic...

-

208 pages

Written in 2023/2024

Grade A+

STANFORDGRADESS