Logo ExamsQA
Exit
Official Bank 0/357

Certified Secure Software Lifecycle Professional (CSSLP) - ISC2 Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
357 Total Questions
1
Question
The Software Configuration Management (SCM) process defines the need to trace changes, and the ability to verify that the final delivered software has all of the planned enhancements that are supposed to be included in the release. What are the procedures that must be defined for each software project to ensure that a sound SCM process is implemented? Each correct answer represents a complete solution. Choose all that apply.
Select 5
Options
A Configuration identification
B Configuration status accounting
C Configuration audits
D Configuration implementation F.Configuration deployment
E Configuration change control
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which of the following statements about a host-based intrusion prevention system (HIPS) are true? Each correct answer represents a complete solution. Choose two.
Select 2
Options
A It can handle encrypted and unencrypted traffic equally.
B It can detect events scattered over the network.
C It cannot detect events scattered over the network.
D It is a technique that allows multiple computers to share one or more IP addresses.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Samantha works as an Ethical Hacker for we-are-secure Inc. She wants to test the security of the we- are-secure server for DoS attacks. She sends large number of ICMP ECHO packets to the target computer. Which of the following DoS attacking techniques will she use to accomplish the task?
Options
A Ping flood attack
B Smurf dos attack
C Teardrop attack
D Land attack
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to this criteria, which of the following controls are intended to prevent an incident from occurring?
Options
A Detective controls
B Corrective controls
C Preventive controls
D Adaptive controls
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which of the following models manages the software development process if the developers are limited to go back only one stage to rework?
Options
A RAD model
B Waterfall model
C Prototyping model
D Spiral model
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.