Define the Security Architecture CSSLP Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which of the following is the primary security concern introduced by software-defined production processes?

   • AThe need to secure the software that controls production, since a compromise could lead to incorrect or malicious production outcomes.
   • BThe challenge of ensuring that production software is compatible with legacy hardware.
   • CThe requirement to encrypt all data at rest in the production database to prevent data leakage.
   • DThe need to hire additional security staff to monitor production networks around the clock.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A hospital is deploying wireless sensors to monitor patient vital signs. The sensors transmit data to a central monitoring station. The security architect is concerned about an attacker intercepting the wireless communication and altering the patient data. Which of the following is the most important security control to implement?

   • AUse a simple WPA2-PSK password shared across all sensors.
   • BUse a proprietary wireless protocol that is not publicly documented.
   • CUse WPA2-Enterprise or WPA3 with mutual authentication and encrypt all traffic with AES.
   • DRely on the physical security of the hospital to prevent attackers from getting close enough to intercept the signal.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is a security risk associated with NFC (Near Field Communication)?

   • ANFC is immune to eavesdropping because of its short range
   • BNFC is only used for payments, so no other data is at risk
   • CNFC does not require encryption
   • DData interception during NFC transactions
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A mobile banking app is designed to maintain a constant connection to the server to provide real-time updates and push notifications. The security architect is concerned about the security implications of this constant connectivity, particularly regarding session management. Which of the following is the most important control to implement?

   • AUse a long-lived session token that never expires to provide a seamless user experience.
   • BStore the session token in the device's shared preferences for easy access.
   • CImplement short-lived session tokens with automatic refresh and re-authentication for sensitive operations.
   • DDisable the session timeout feature to avoid interrupting the user.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   In a secure update process, what is the role of a certificate pinning or a hardcoded public key in the client software?

   • AIt provides a backup key in case the primary signing key is compromised.
   • BIt ensures the update server's TLS certificate is valid and not expired.
   • CIt encrypts the update package so that only the intended client can read it.
   • DIt allows the client to verify that the update signature was created by the trusted software publisher.
   Reveal Solution Discussion Select an answer first