A media company is decommissioning a content-management application. The application used a service account that is also referenced in the configuration of a separate reporting tool. The reporting tool is still in production. The decommissioning team has been instructed to remove all credentials associated with the decommissioned application. What is the BEST course of action?

Leave the service account active and document that it is shared with the reporting tool.

Remove the service account from the decommissioned application's configuration, but leave the account active for the reporting tool.

Disable the service account and update the reporting tool to use a new service account.

Create a new service account for the reporting tool, update the reporting tool's configuration, then disable the original shared account.

What is the primary purpose of license cancellation during application decommissioning?

To terminate the legal right to use the software and avoid ongoing licensing costs.

To document the license details for future audits.

To renew the license for a final period during decommissioning.

To transfer the license to another application within the organization.

Which of the following is a key step in the credential removal process during decommissioning?

Changing all passwords to a default value for future use.

Documenting all credentials in a shared spreadsheet for the decommissioning team.

Revoking or disabling all user accounts and service accounts associated with the application.

Keeping accounts active but removing them from the application's access control list.

Why is it important to remove application configurations and associated settings during decommissioning?

To comply with software licensing agreements that require configuration removal.

To prevent the application from being accidentally restarted with outdated or insecure settings.

To make the application easier to reinstall in the future.

To free up disk space on the server.

What is the primary purpose of archiving a decommissioned application's data?

To immediately delete all data to free up storage space.

To preserve data that may be needed for legal, regulatory, or business purposes in a secure and retrievable format.

To keep the application running in a read-only mode for historical reference.

To transfer all data to the new application without any review.

Certified Secure Software Lifecycle Professional

Domain 2Objective 6

Decommission Applications CSSLP Practice Questions (Page 3)

Part of the Secure Software Lifecycle Management domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

11%of the exam

Questions 11–15

11expert · hard
A media company is decommissioning a content-management application. The application used a service account that is also referenced in the configuration of a separate reporting tool. The reporting tool is still in production. The decommissioning team has been instructed to remove all credentials associated with the decommissioned application. What is the BEST course of action?
Select an answer first
12foundation · easy
What is the primary purpose of license cancellation during application decommissioning?
Select an answer first
13foundation · easy
Which of the following is a key step in the credential removal process during decommissioning?
Select an answer first
14foundation · easy
Why is it important to remove application configurations and associated settings during decommissioning?
Select an answer first
15foundation · easy
What is the primary purpose of archiving a decommissioned application's data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.