CSSLP Practice Test

CSSLP Practice Test practice questions, page 5 of 14, with answer review and explanations.

Question 21

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about ISSO and ISSE? Each correct answer represents a complete solution. Choose all that apply.

  1. An ISSE manages the security of the information system that is slated for Certification & Accreditation (C&A).
  2. An ISSE provides advice on the continuous monitoring of the information system.
  3. An ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A).
  4. An ISSE provides advice on the impacts of system changes. E. An ISSO takes part in the development activities that are required to implement system

Question 22

In which of the following types of tests are the disaster recovery checklists distributed to the members of disaster recovery team and asked to review the assigned checklist?

  1. Parallel test
  2. Simulation test
  3. Full-interruption test
  4. Checklist test

Question 23

SIMULATION - Fill in the blank with an appropriate phrase. models address specifications, requirements, design, verification and validation, and maintenance activities.

Question 24

Which of the following security design patterns provides an alternative by requiring that a user's authentication credentials be verified by the database before providing access to that user's data?

  1. Secure assertion
  2. Authenticated session
  3. Password propagation
  4. Account lockout

Question 25

Which of the following is the duration of time and a service level within which a business process must be restored after a disaster in order to avoid unacceptable consequences associated with a break in business continuity?

  1. RTO
  2. RTA
  3. RPO
  4. RCO