CSSLP Exam Questions

Fred is the project manager of the CPS project. He is working with his project team to prioritize the identified risks within the CPS project. He and the team are prioritizing risk...

Which of the following are the levels of public or commercial data classification system? Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements are true about declarative security? Each correct answer represents a complete solution. Choose all that apply.

What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?

The DoD 8500 policy series represents the Department's information assurance strategy. Which of the following objectives are defined by the DoD 8500 series? Each correct answer rep...

Which of the following vulnerabilities occurs when an application directly uses or concatenates potentially hostile input with data file or stream functions?

Which of the following are the primary functions of configuration management? Each correct answer represents a complete solution. Choose all that apply.

Which of the following are included in Technical Controls? Each correct answer represents a complete solution. Choose all that apply.

What are the various phases of the Software Assurance Acquisition process according to the U.S. Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition an...

Companies use some special marks to distinguish their products from those of other companies. These marks can include words, letters, numbers, drawings, etc. Which of the following...

Which of the following features of SIEM products is used in analysis for identifying potential problems and reviewing all available data that are associated with the problems?

Which of the following is the process of finding weaknesses in cryptographic algorithms and obtaining the plaintext or key from the ciphertext?

Which of the following agencies is responsible for funding the development of many technologies such as computer networking, as well as NLS?

Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.

Which of the following methods can be helpful to eliminate social engineering threat? Each correct answer represents a complete solution. Choose three.

Digital rights management (DRM) consists of compliance and robustness rules. Which of the following features does the robustness rule have? Each correct answer represents a complet...

Which of the following types of attacks occurs when an attacker successfully inserts an intermediary software or program between two communicating hosts?

Which of the following is an example of penetration testing?

Which of the following security controls works as the totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of whi...

You are responsible for network and information security at a large hospital. It is a significant concern that any change to any patient record can be easily traced back to the per...

In which of the following deployment models of cloud is the cloud infrastructure operated exclusively for an organization?

The Software Configuration Management (SCM) process defines the need to trace changes, and the ability to verify that the final delivered software has all of the planned enhancemen...

At which of the following levels of robustness in DRM must the security functions be immune to widely available tools and specialized tools and resistant to professional tools?

Which of the following plans is designed to protect critical business processes from natural or man- made failures or disasters and the resultant loss of capital due to the unavail...

Which of the following scanning techniques helps to ensure that the standard software configuration is currently with the latest security patches and software, and helps to locate...

Which of the following tiers addresses risks from an information system perspective?

Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2000 domain- based network. Users report that they are unable to log on to the network. Mark finds...

System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the diffe...

Which of the following techniques is used to identify attacks originating from a botnet?

Which of the following security models dictates that subjects can only access objects through applications?

The Project Risk Management knowledge area focuses on which of the following processes? Each correct answer represents a complete solution. Choose all that apply.

Which of the following is used by attackers to record everything a person types, including usernames, passwords, and account information?

Which of the following policies can explain how the company interacts with partners, the company's goals and mission, and a general reporting structure in different situations?

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process? Each correct answer represents a complete solution. Choose all that ap...

Which of the following is an open source network intrusion detection system?

You work as a Security Manager for Tech Perfect Inc. The company has a Windows based network. It is required to determine compatibility of the systems with custom applications. Whi...

Adrian is the project manager of the NHP Project. In her project there are several work packages that deal with electrical wiring. Rather than to manage the risk internally she has...

You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You have a disaster scenario and you want to discuss it with your team members for getting appropriate responses of...

Which of the following is the most secure method of authentication?

Maria has been recently appointed as a Network Administrator in Gentech Inc. She has been tasked to perform network security testing to find out the vulnerabilities and shortcoming...

Which of the following processes identifies the threats that can impact the business continuity of operations?

The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate that the preceding work has produced an IS that operates in a specified computing environment....

Which of the following methods is a means of ensuring that system changes are approved before being implemented, only the proposed and approved changes are implemented, and the imp...

Information Security management is a process of defining the security controls in order to protect information assets. The first action of a management program to implement informa...

What NIACAP certification levels are recommended by the certifier? Each correct answer represents a complete solution. Choose all that apply.

Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

Which of the following characteristics are described by the DIAP Information Readiness Assessment function? Each correct answer represents a complete solution. Choose all that appl...

Which of the following classification levels defines the information that, if disclosed to the unauthorized parties, could be reasonably expected to cause exceptionally grave damag...

Which of the following security design principles supports comprehensive and simple design and implementation of protection mechanisms, so that an unintended access path does not e...