CSSLP Practice Test

CSSLP Practice Test practice questions, page 3 of 14, with answer review and explanations.

Question 11

Which of the following models uses a directed graph to specify the rights that a subject can transfer to an object or that a subject can take from another subject?

  1. Take-Grant Protection Model
  2. Biba Integrity Model
  3. Bell-LaPadula Model
  4. Access Matrix

Question 12

You are the project manager for GHY Project and are working to create a risk response for a negative risk. You and the project team have identified the risk that the project may not complete on time, as required by the management, due to the creation of the user guide for the software you're creating. You have elected to hire an external writer in order to satisfy the requirements and to alleviate the risk event. What type of risk response have you elected to use in this instance?

  1. Transference
  2. Exploiting
  3. Avoidance
  4. Sharing

Question 13

Which of the following organizations assists the President in overseeing the preparation of the federal budget and to supervise its administration in Executive Branch agencies?

  1. OMB
  2. NIST
  3. NSA/CSS
  4. DCAA

Question 14

Part of your change management plan details what should happen in the change control system for your project. Theresa, a junior project manager, asks what the configuration management activities are for scope changes. You tell her that all of the following are valid configuration management activities except for which one?

  1. Configuration Identification
  2. Configuration Verification and Auditing
  3. Configuration Status Accounting
  4. Configuration Item Costing

Question 15

Which of the following types of redundancy prevents attacks in which an attacker can get physical control of a machine, insert unauthorized software, and alter data?

  1. Data redundancy
  2. Hardware redundancy
  3. Process redundancy
  4. Application redundancy