Adhere to Relevant Secure Coding Practices (e.g., Standards, Guidelines, Regulations) CSSLP Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard

   A team is developing a multi-threaded application that maintains a shared counter for tracking active user sessions. The counter is incremented when a session starts and decremented when it ends. Under load, the counter occasionally shows an incorrect value, and the team suspects a race condition. The application also logs session events. Which fix should the team implement to ensure the counter is accurate without introducing a deadlock?

   • AUse a volatile variable for the counter
   • BWrap the counter update in a synchronized block and log inside the block
   • CUse an atomic increment/decrement operation for the counter
   • DMove the counter to a database and use a transaction for each update
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a common consequence of failing to release resources (e.g., file handles, database connections) in code?

   • AIncreased application speed.
   • BMemory leaks and resource exhaustion.
   • CAutomatic garbage collection of all resources.
   • DImproved security due to fewer open connections.
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   What is a baseline security configuration?

   • AA configuration that is only applied to production systems.
   • BA configuration that is unique to each developer's machine.
   • CA configuration that disables all security features for testing.
   • DA set of security settings that are applied consistently to all systems of a given type.
   Reveal Solution Discussion Select an answer first