What is a unique security challenge in peer-to-peer (P2P) architectures?

Difficulty in scaling the network

Centralized authentication of users

Single point of failure for the network

Establishing trust between unknown peers

In a federated identity model, what is the role of the identity provider (IdP)?

To host the applications and services that users access

To enforce access control policies on all resources

To store all user data and personal information

To authenticate users and provide assertions about their identity to service providers

During the design of a secure AI system, which practice best supports the security of the machine learning model itself?

Encrypting all network traffic between the application and the database

Using a load balancer to distribute inference requests

Validating and sanitizing inputs before they are fed to the model

Implementing strong password policies for all users

A startup is building a file-sharing application that will allow users to share files directly between their devices without a central server. The architecture relies on peer-to-peer (P2P) communication. The security architect is concerned about the authenticity of files and the potential for malicious peers to inject tampered data. Which combination of controls should be implemented to address these concerns?

Rely on the peer-to-peer protocol's built-in encryption to ensure data integrity.

Implement a reputation system where peers rate each other, and block peers with low ratings.

Use a centralized index server to authenticate peers and sign all file chunks with the publisher's private key.

Require all peers to use the same shared secret key for encrypting file transfers.

In the SABSA framework, what does the 'business view' primarily focus on?

The physical security measures for data centers and facilities

The specific security controls and mechanisms to be deployed

The strategic business objectives and risk appetite of the organization

The detailed technical configuration of network devices and servers

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 17)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 81–85

81foundation · easy
What is a unique security challenge in peer-to-peer (P2P) architectures?
Select an answer first
82foundation · easy
In a federated identity model, what is the role of the identity provider (IdP)?
Select an answer first
83foundation · easy
During the design of a secure AI system, which practice best supports the security of the machine learning model itself?
Select an answer first
84application · medium
A startup is building a file-sharing application that will allow users to share files directly between their devices without a central server. The architecture relies on peer-to-peer (P2P) communication. The security architect is concerned about the authenticity of files and the potential for malicious peers to inject tampered data. Which combination of controls should be implemented to address these concerns?
Select an answer first
85foundation · easy
In the SABSA framework, what does the 'business view' primarily focus on?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.