Free CSSLP Exam Braindumps
Certified Secure Software Lifecycle Professional Questions 166–170 (page: 34)

Updated On: 10-Feb-2026

DRAG DROP
Drag and drop the appropriate external constructs in front of their respective functions.

  1. The Answer is Exhibit B.

Answer(s): A

Explanation:

There are two types of compositional constructs: 1.External constructs: The various types of external constructs are as follows: Cascading: In this type of external construct, one system gains the input from the output of another system. Feedback: In this type of external construct, one system provides the input to another system, which in turn feeds back to the input of the first system. Hookup: In this type of external construct, one system communicates with another system as well as with external entities. 2.Internal constructs: The internal constructs include intersection, union, and difference.



Which of the following are the primary functions of configuration management?
Each correct answer represents a complete solution. Choose all that apply.

  1. It removes the risk event entirely by adding additional steps to avoid the event.
  2. It ensures that the change is implemented in a sequential manner through formalized testing.
  3. It reduces the negative impact that the change might have had on the computing services and resources.
  4. It analyzes the effect of the change that is implemented on the system.

Answer(s): B,C,D

Explanation:

The primary functions of configuration management are as follows: It ensures that the change is implemented in a sequential manner through formalized testing. It ensures that the user base is informed of the future change. It analyzes the effect of the change that is implemented on the system. It reduces the negative impact that the change might have had on the computing services and resources. Answer A is incorrect. It is not one of the primary functions of configuration management. It is the function of risk avoidance.



Which of the following are included in Technical Controls? Each correct answer represents a complete solution. Choose all that apply.

  1. Identification and authentication methods
  2. Configuration of the infrastructure
  3. Password and resource management
  4. Implementing and maintaining access control mechanisms
  5. Security devices
  6. Conducting security-awareness training

Answer(s): A,B,C,D,E

Explanation:

Technical Controls are also known as Logical Controls. These controls include the following: Implementing and maintaining access control mechanisms Password and resource management Identification and authentication methods Security devices Configuration of the infrastructure Answer F is incorrect. It is a part of Administrative Controls.



What are the various phases of the Software Assurance Acquisition process according to the U.S. Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition and Outsourcing Working Group?

  1. Implementing, contracting, auditing, monitoring
  2. Requirements, planning, monitoring, auditing
  3. Planning, contracting, monitoring and acceptance, follow-on
  4. Designing, implementing, contracting, monitoring

Answer(s): C

Explanation:

Software Assurance Acquisition process defines the level of confidence that software is free from vulnerabilities. It is designed into the software or accidentally inserted at anytime during its lifecycle, and the software works in a planned manner. According to the U.S. Department of Defense and Department of Homeland Security Acquisition and Outsourcing Working Group, the Software Assurance Acquisition process contains the following phases: 1.Planning 2.Contracting 3.Monitoring and acceptance 4.Follow-on



Companies use some special marks to distinguish their products from those of other companies. These marks can include words, letters, numbers, drawings, etc. Which of the following terms describes these special marks?

  1. Business mark
  2. Trademark
  3. Sales mark
  4. Product mark

Answer(s): B

Explanation:

A trademark is a mark that is used by a company to distinguish its products from those of other companies. There are various ways a company uses its trademark to distinguish its products from others. It can use words, letters, numbers, drawings, pictures, and so on, in its trademark.
Answer(s): D, A, and C are incorrect. There is no such mark as product mark, business mark, or sales mark.



Viewing page 34 of 71
Viewing questions 166 - 170 out of 357 questions


Post your Comments and Discuss ISC2 CSSLP exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!