CSSLP Practice Test

CSSLP Practice Test practice questions, page 9 of 14, with answer review and explanations.

Question 41

Which of the following methods does the Java Servlet Specification v2.4 define in the HttpServletRequest interface that control programmatic security? Each correct answer represents a complete solution. Choose all that apply.

  1. getCallerIdentity()
  2. isUserInRole()
  3. getUserPrincipal()
  4. getRemoteUser()

Question 42

You are the project manager of the CUL project in your organization. You and the project team are assessing the risk events and creating a probability and impact matrix for the identified risks. Which one of the following statements best describes the requirements for the data type used in qualitative risk analysis?

  1. A qualitative risk analysis encourages biased data to reveal risk tolerances.
  2. A qualitative risk analysis required unbiased stakeholders with biased risk tolerances.
  3. A qualitative risk analysis requires accurate and unbiased data if it is to be credible.
  4. A qualitative risk analysis requires fast and simple data to complete the analysis.

Question 43

FIPS 199 defines the three levels of potential impact on organizations. Which of the following potential impact levels shows limited adverse effects on organizational operations, organizational assets, or individuals?

  1. Moderate
  2. Low
  3. Medium
  4. High

Question 44

You work as the senior project manager in SoftTech Inc. You are working on a software project using configuration management. Through configuration management you are decomposing the verification system into identifiable, understandable, manageable, traceable units that are known as Configuration Items (CIs). According to you, which of the following processes is known as the decomposition process of a verification system into Configuration Items?

  1. Configuration status accounting
  2. Configuration identification
  3. Configuration auditing
  4. Configuration control

Question 45

Bill is the project manager of the JKH Project. He and the project team have identified a risk event in the project with a high probability of occurrence and the risk event has a high cost impact on the project. Bill discusses the risk event with Virginia, the primary project customer, and she decides that the requirements surrounding the risk event should be removed from the project. The removal of the requirements does affect the project scope, but it can release the project from the high risk exposure. What risk response has been enacted in this project?

  1. Mitigation
  2. Transference
  3. Acceptance
  4. Avoidance