What is the primary role of a message broker in a message queuing architecture?

To encrypt all messages at rest and in transit

To authenticate users and manage their identities

To store all messages permanently for auditing

To reliably route and deliver messages between producers and consumers

Which security concern is most directly associated with the robotic manipulator's network-connected controller?

Physical wear of the end effector

Excessive power consumption by the motors

Incorrect calibration of the vision system

Unauthorized modification of motion parameters

What is the purpose of implementing mutual authentication between facility IoT devices and the central management server?

To ensure that both the device and the server verify each other's identity before exchanging data

To ensure that only the device can initiate communication with the server

To allow the server to send commands to devices without any verification

To encrypt all data in transit using a shared static key

Which of the following describes a key characteristic of a secure element in a device architecture?

It is a cloud-based service that manages encryption keys for multiple applications

It is a hardware component that provides isolated storage and processing for sensitive data, resistant to tampering

It is a network protocol that authenticates devices to a server using certificates

It is a software module that runs within the main operating system and enforces access control policies

When an organization deploys a web application to a PaaS platform, which security control is the customer most likely responsible for implementing?

Hardening of the guest operating system

Network firewall rules for the underlying virtual network

Physical access controls to the servers

Secure coding practices in the application

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 3)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 11–15

11foundation · easy
What is the primary role of a message broker in a message queuing architecture?
Select an answer first
12foundation · easy
Which security concern is most directly associated with the robotic manipulator's network-connected controller?
Select an answer first
13foundation · easy
What is the purpose of implementing mutual authentication between facility IoT devices and the central management server?
Select an answer first
14foundation · easy
Which of the following describes a key characteristic of a secure element in a device architecture?
Select an answer first
15foundation · easy
When an organization deploys a web application to a PaaS platform, which security control is the customer most likely responsible for implementing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.