CSSLP Certified Secure Software Lifecycle Professional Practice Test
Gana confianza para CSSLP Certified Secure Software Lifecycle Professional. Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
ISC2 secure software development certification covering secure software concepts, requirements, design, implementation, testing, and supply chain risk management. Administered by ISC2. Key domains include Secure Software Architecture and Design, Secure Software Implementation, Secure Software Testing and Secure Software Requirements. The exam consists of 125 questions over 180 minutes.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
A 3 AM page reports a confirmed exploitation of a zero-day in a third-party library used in the payment gateway. The CSSLP-certified incident lead must choose the immediate containment action. Which is MOST aligned with NIST SP 800-61 Rev. 2 plus SSDF RV.1?
A health-information SaaS handles PHI under HIPAA and the EU Health Data Space proposal. Which approach is BEST for managing the cross-jurisdictional security requirements set?
A product owner argues that "fail securely" means the system should always fail closed. A senior engineer pushes back, citing a recent outage where a fail-closed authorization library caused a hospital ED triage screen to go blank during an LDAP outage. Per ISC2 CSSLP guidance, what is the correct interpretation of the "fail securely" principle in this dispute?
You are eliciting security requirements for a fintech mobile app handling card-present and card-not-present flows. PCI DSS v4.0 applies. Which elicitation technique BEST surfaces abuse cases (negative requirements) that pure user-story workshops typically miss?
A defense-contractor product manager hands the team a one-line requirement: "must comply with NIST 800-53 Rev. 5 controls AC-2, AC-3, AU-2." A CSSLP analyst is asked to convert this into testable security requirements. Which conversion approach is MOST aligned with CSSLP requirements engineering?
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.