Question 1

Which of the following are controls that can be used to ensure software authenticity? (Choose all that apply.)

Options :

A : Specifications

B : Hash values

C : Nonrepudiation of origin

D : License keys

Answer: B,C

Question 2

Key process metrics need to be established to enable management to do what? (Choose all that apply.)

Options :

A : Make correct assessments about conditions

B : Determine when to retire the system

C : Assess the outcomes of key activities and actions

D : Analyze the performance of the system

Answer: A,C,D

Question 3

With imperative programming, the security implementation is:

Options :

A : Well-defined and commonly recognized

B : Embedded in a container in which rules are configured as part of deployment

C : Embedded into the code itself

D : Specified in a set of well-defined actions

Answer: C

Question 4

What are the security advantages of virtualization, as described in the NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards"? Each correct answer represents a complete solution. Choose three

Options :

A : It increases capabilities for fault tolerant computing

B : It adds a layer of security for defense-in-depth

C : It decreases exposure of weak software

D : It decreases configuration effort

Answer: A,B,C

Question 5

You work as a Security Manager for Tech Perfect Inc. You find that some applications have failed to encrypt network traffic while ensuring secure communications in the organization. Which of the following will you use to resolve the issue?

Options :

A : SCP

B : TLS

C : IPSec

D : HTTPS

Answer: B

Higher Test Marks with Free Online CSSLP Exam Practice

Buying Options: