CSSLP Practice Test

CSSLP Practice Test practice questions, page 2 of 14, with answer review and explanations.

Question 6

DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance Categories (MAC) and confidentiality levels. Which of the following MAC levels requires high integrity and medium availability?

  1. MAC III
  2. MAC IV
  3. MAC I
  4. MAC II

Question 7

Microsoft software security expert Michael Howard defines some heuristics for determining code review in "A Process for Performing Security Code Reviews". Which of the following heuristics increase the application's attack surface? Each correct answer represents a complete solution. Choose all that apply.

  1. Code written in C/C++/assembly language
  2. Code listening on a globally accessible network interface
  3. Code that changes frequently
  4. Anonymously accessible code
  5. Code that runs by default
  6. Code that runs in elevated context

Question 8

Which of the following cryptographic system services ensures that information will not be disclosed to any unauthorized person on a local network?

  1. Authentication
  2. Integrity
  3. Non-repudiation
  4. Confidentiality

Question 9

What are the various activities performed in the planning phase of the Software Assurance Acquisition process? Each correct answer represents a complete solution. Choose all that apply.

  1. Develop software requirements.
  2. Implement change control procedures.
  3. Develop evaluation criteria and evaluation plan.
  4. Create acquisition strategy.

Question 10

You work as a project manager for BlueWell Inc. You are working on a project and the management wants a rapid and cost-effective means for establishing priorities for planning risk responses in your project. Which risk management process can satisfy management's objective for your project?

  1. Qualitative risk analysis
  2. Historical information
  3. Rolling wave planning
  4. Quantitative analysis