CSSLP Practice Test

CSSLP Practice Test practice questions, page 7 of 14, with answer review and explanations.

Question 31

You work as a systems engineer for BlueWell Inc. Which of the following tools will you use to look outside your own organization to examine how others achieve their performance levels, and what processes they use to reach those levels?

  1. Benchmarking
  2. Six Sigma
  3. ISO 9001:2000
  4. SEI-CMM

Question 32

Which of the following methods determines the principle name of the current user and returns the jav a.security.Principal object in the HttpServletRequest interface?

  1. getUserPrincipal()
  2. isUserInRole()
  3. getRemoteUser()
  4. getCallerPrincipal()

Question 33

The NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards" specifies potential advantages and disdvantages of virtualization. Which of the following disadvantages does it include? Each correct answer represents a complete solution. Choose all that apply.

  1. It increases capabilities for fault tolerant computing using rollback and snapshot features.
  2. It increases intrusion detection through introspection.
  3. It initiates the risk that malicious software is targeting the VM environment.
  4. It increases overall security risk shared resources.
  5. It creates the possibility that remote attestation may not work.
  6. It involves new protection mechanisms for preventing VM escape, VM detection, and VM-VM interference.
  7. It increases configuration effort because of complexity and composite system.

Question 34

Which of the following are the types of access controls? Each correct answer represents a complete solution. Choose three.

  1. Physical
  2. Technical
  3. Administrative
  4. Automatic

Question 35

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

  1. Initiate IA implementation plan
  2. Develop DIACAP strategy
  3. Assign IA controls.
  4. Assemble DIACAP team
  5. Register system with DoD Component IA Program.
  6. Conduct validation activity.