Question 1

You work as a Security Manager for Tech Perfect Inc. You find that some applications have failed to encrypt network traffic while ensuring secure communications in the organization. Which of the following will you use to resolve the issue?

Options :

A : SCP

B : TLS

C : IPSec

D : HTTPS

Answer: B

Question 2

What do supplier transitioning concerns focus on?

Options :

A : Design level

B : Acceptance level

C : Interface level

D : Code level

Answer: C

Question 3

Which of the following statements about secure backup and restoration planning is correct?

Options :

A : In case of a system failure, create a disaster recovery plan that not only involves restoring data but also includes procedures for notifying the affected individuals, plans for mitigating further damage from data loss, and means for storing and retrieving the data securely.

B : In the world of cloud computing, the concept of creating backups is now an outmoded way of thinking. Merely make sure that all your databases create hot copies of the data in a secure cloud storage system for data recovery.

C : When creating backups, use a fast network connection to ensure that all data is backed up and to limit the time data is in motion.

D : When creating a plan for backup and restoration, you must consider that the cost of this action may exceed your normal operating budget.

Answer: A

Question 4

Static analysis should be used to check for what?

Options :

A : Approved function/library calls, examining rules and semantics associated with logic, and thread performance management

B : Syntax, approved function/library calls, and memory management

C : Syntax, approved function/library calls, and race conditions

D : Syntax, approved function/library calls, and examining rules and semantics associated with logic and calls

Answer: D

Question 5

The LeGrand Vulnerability-Oriented Risk Management method is based on vulnerability analysis and consists of four principle steps. Which of the following processes does the risk assessment step include? Each correct answer represents a part of the solution. Choose all that apply

Options :

A : Remediation of a particular vulnerability

B : Cost-benefit examination of countermeasures

C : Identification of vulnerabilities

D : Assessment of attacks

Answer: B,C,D

Confidently Practice Online with Free CSSLP Exam Cram

Buying Options: