CSSLP Practice Test

CSSLP Practice Test practice questions, page 6 of 14, with answer review and explanations.

Question 26

Which of the following processes culminates in an agreement between key players that a system in its current configuration and operation provides adequate protection controls?

  1. Information Assurance (IA)
  2. Information systems security engineering (ISSE)
  3. Certification and accreditation (C&A)
  4. Risk Management

Question 27

Adam works as a Computer Hacking Forensic Investigator for a garment company in the United States. A project has been assigned to him to investigate a case of a disloyal employee who is suspected of stealing design of the garments, which belongs to the company and selling those garments of the same design under different brand name. Adam investigated that the company does not have any policy related to the copy of design of the garments. He also investigated that the trademark under which the employee is selling the garments is almost identical to the original trademark of the company. On the grounds of which of the following laws can the employee be prosecuted?

  1. Espionage law
  2. Trademark law
  3. Cyber law
  4. Copyright law

Question 28

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. In order to do so, he performs the following steps of the pre-attack phase successfully: Information gathering Determination of network range Identification of active systems Location of open ports and applications Now, which of the following tasks should he perform next?

  1. Perform OS fingerprinting on the We-are-secure network.
  2. Map the network of We-are-secure Inc.
  3. Install a backdoor to log in remotely on the We-are-secure server.
  4. Fingerprint the services running on the we-are-secure network.

Question 29

Which of the following DITSCAP C&A phases takes place between the signing of the initial version of the SSAA and the formal accreditation of the system?

  1. Phase 4
  2. Phase 3
  3. Phase 1
  4. Phase 2

Question 30

In which of the following testing methodologies do assessors use all available documentation and work under no constraints, and attempt to circumvent the security features of an information system?

  1. Full operational test
  2. Penetration test
  3. Paper test
  4. Walk-through test