nerdexam
(ISC)2(ISC)2

CSSLP · Question #376

CSSLP Question #376: Real Exam Question with Answer & Explanation

The correct answer is D: isolation and containment to reduce risk.. The fundamental benefit of sandboxed environments is isolation and containment, which reduces the risk of malicious or faulty code affecting the host system.

Secure Software Concepts

Question

The fundamental benefit of a sandboxed environments is about:

Options

  • Arestricting access to code repositories.
  • Bauthentication and authorization.
  • Cidentification of vulnerabilities in code with no false positives.
  • Disolation and containment to reduce risk.

Explanation

The fundamental benefit of sandboxed environments is isolation and containment, which reduces the risk of malicious or faulty code affecting the host system.

Common mistakes.

  • A. Restricting access to code repositories is a function of version control and access control systems, not the primary benefit of a sandbox.
  • B. Authentication and authorization are about verifying identity and granting permissions, which are security concepts distinct from the primary function of a sandbox.
  • C. While sandboxes can be used in vulnerability testing, they do not guarantee the identification of all vulnerabilities or prevent false positives.

Concept tested. Benefit of sandboxed environments

Reference. https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview

Topics

#Sandboxing#Isolation#Containment#Risk Reduction

Community Discussion

No community discussion yet for this question.

Full CSSLP PracticeBrowse All CSSLP Questions