What is the primary purpose of using TLS for web services?

To ensure message-level integrity

To prevent SQL injection attacks

To encrypt the communication channel between client and server

To authenticate users at the application layer

Why are device drivers considered a significant security risk in a system's architecture?

They are the only software components that can access the network stack.

They run with elevated privileges and often process untrusted input from hardware devices.

They are typically written in interpreted languages that are easy to exploit.

They are automatically updated by the operating system without any user interaction.

In the context of medical device security, what does the term 'security architecture' primarily encompass?

The selection of encryption algorithms for data at rest and in transit

The overall design of the device's hardware and software to protect patient safety and data

The physical layout of the hospital network where the device is deployed

The process of obtaining regulatory approval from the FDA

What is a key security concern in service-oriented architecture (SOA)?

Eliminating the need for encryption

Authenticating and authorizing requests to services

Preventing services from being reused

Ensuring that services are written in the same programming language

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 5)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 21–25

21foundation · easy
What is the primary purpose of using TLS for web services?
Select an answer first
22foundation · easy
Why are device drivers considered a significant security risk in a system's architecture?
Select an answer first
23foundation · easy
In the context of medical device security, what does the term 'security architecture' primarily encompass?
Select an answer first
24foundation · easy
What is a key security concern in service-oriented architecture (SOA)?
Select an answer first
25foundation · easy
Which of the following is a common defensive technique used to detect buffer overflows at runtime?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.