Free Certified Secure Software Lifecycle Professional Exam CSSLP Exam Practice Test

Which of the following technologies is used by hardware manufacturers, publishers, copyright holders and individuals to impose limitations on the usage of digital content and devices?

• Hypervisor
• Grid computing
• Code signing
• Digital rights management

Which of the following is designed to detect unwanted attempts at accessing, manipulating, and disabling of computer systems through the Internet?

• DAS
• IPsec
• IDS
• ACL

Which of the following are the types of intellectual property?Each correct answer represents a complete solution. Choose all that apply.

• Patent
• Copyright
• Standard
• Trademark

A security policy is an overall general statement produced by senior management that dictates what role security plays within theorganization. Which of the following are required to be addressed in a well designed policy?Each correct answer represents a part of the solution. Choose all that apply.

• What is being secured?
• Where is the vulnerability, threat, or risk?
• Who is expected to exploit the vulnerability?
• Who is expected to comply with the policy?

You work as a security manager for BlueWell Inc. You are performing the external vulnerability testing, or penetration testing to get a better snapshot of your organization's security posture. Which of the following penetration testing techniques will you use for searching paper disposal areas for unshredded or otherwise improperly disposed-of reports?

• Sniffing
• Scanning and probing
• Dumpster diving
• Demon dialing

Which of the following is a patch management utility that scans one or more computers on a network and alerts a user if any important Microsoft security patches are missing and also provides links that enable those missing patches to be downloaded and installed?

• MABS
• ASNB
• MBSA
• IDMS

Which of the following types of redundancy prevents attacks in which an attacker can get physical control of a machine, insert unauthorized software, and alter data?

• Data redundancy
• Hardware redundancy
• Process redundancy
• Application redundancy

Which of the following ISO standards provides guidelines for accreditation of an organization that is concerned with certification and registration related to ISMS?

• ISO 27006
• ISO 27005
• ISO 27003
• ISO 27004

Fill in the blank with an appropriate phrase. is used to provide security mechanisms for the storage, processing, and transfer of data.

To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to this criteria, which of the following controls are intended to prevent an incident from occurring?

• Corrective controls
• Adaptive controls
• Detective controls
• Preventive controls