Which component is essential for a code signing process to be effective?

A private key held by the software publisher

A symmetric encryption algorithm

A public key that is kept secret

A timestamp from a third-party service

A software company distributes a mobile app through an enterprise app store. They want to ensure that only their official builds can be installed and that any modified version is rejected by the device. Which build-time measure should they implement?

Sign the app package with the organization's private key and verify the signature on the device before installation.

Obfuscate the app's bytecode with a commercial obfuscator.

Embed a checksum in the app's manifest and check it at runtime.

Enable the compiler's stack protection and ASLR flags.

A development team is compiling a C++ application for Windows that processes untrusted input from the network. They want to reduce the risk of memory-corruption exploits such as buffer overflows. Which compiler switch configuration is most directly effective for this goal?

Compile with /W4 and treat warnings as errors.

Use /O2 for maximum optimization and /GL for whole-program optimization.

Enable /GS (buffer security check) and /guard:cf (control flow guard).

Set /MD to link against the dynamic runtime and /EHsc for C++ exceptions.

Certified Secure Software Lifecycle Professional

Domain 5Objective 6

Apply Security During the Build Process CSSLP Practice Questions (Page 4)

Part of the Secure Software Implementation domain, which accounts for 14% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

14%of the exam

Questions 16–20

16foundation · easy
Which component is essential for a code signing process to be effective?
Select an answer first
17application · medium
A software company distributes a mobile app through an enterprise app store. They want to ensure that only their official builds can be installed and that any modified version is rejected by the device. Which build-time measure should they implement?
Select an answer first
18foundation · easy
Which compiler switch is commonly used to enable stack protection against buffer overflow attacks?
Select an answer first
19application · medium
A development team is compiling a C++ application for Windows that processes untrusted input from the network. They want to reduce the risk of memory-corruption exploits such as buffer overflows. Which compiler switch configuration is most directly effective for this goal?
Select an answer first
20application · medium
A security review of a legacy C application found that it is vulnerable to stack buffer overflows. The team is rebuilding the application with a modern compiler. Which compiler switch should they enable to add a runtime check that detects stack corruption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Apply Security During the Build Process CSSLP Practice Questions (Page 4)

Questions 16–20

Which component is essential for a code signing process to be effective?

A software company distributes a mobile app through an enterprise app store. They want to ensure that only their official builds can be installed and that any modified version is rejected by the device. Which build-time measure should they implement?

Which compiler switch is commonly used to enable stack protection against buffer overflow attacks?

A development team is compiling a C++ application for Windows that processes untrusted input from the network. They want to reduce the risk of memory-corruption exploits such as buffer overflows. Which compiler switch configuration is most directly effective for this goal?

A security review of a legacy C application found that it is vulnerable to stack buffer overflows. The team is rebuilding the application with a modern compiler. Which compiler switch should they enable to add a runtime check that detects stack corruption?

Keep studying — Secure Software Implementation