What is a security implication of constant connectivity in rich internet applications?

Elimination of authentication requirements

Increased risk of session hijacking due to persistent connections

Decreased risk of data exposure

In the context of secure software architecture, which statement best describes the role of device drivers?

They are privileged software components that enable the operating system to communicate with and control hardware devices.

They are firmware updates that are applied to hardware devices to fix security vulnerabilities.

They are user-mode applications that provide a graphical interface for hardware configuration.

They are security policies that restrict which hardware devices can be accessed by users.

In automotive IoT security, what is the primary function of a secure boot process?

To encrypt all data stored on the vehicle's storage devices

To ensure that only authenticated and integrity-verified software runs on the ECU

To reduce the time it takes for the vehicle's infotainment system to become ready

To allow remote diagnostics to start the engine remotely

What is remote code execution (RCE) in the context of rich internet applications?

An attacker can read sensitive data without executing code

An attacker is able to run arbitrary code on the server or client system

An attacker can cause a denial of service

An attacker can intercept network traffic

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 2)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 6–10

6foundation · easy
Which class of vulnerabilities arises from the observable side effects of speculative execution?
Select an answer first
7foundation · easy
What is a security implication of constant connectivity in rich internet applications?
Select an answer first
8foundation · easy
In the context of secure software architecture, which statement best describes the role of device drivers?
Select an answer first
9foundation · easy
In automotive IoT security, what is the primary function of a secure boot process?
Select an answer first
10foundation · easy
What is remote code execution (RCE) in the context of rich internet applications?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.