What is the primary goal of prioritizing security controls?

To implement the most effective defense given risk, impact, and cost constraints

To implement all controls equally regardless of risk

To implement only the cheapest controls

To implement controls in alphabetical order

What is the primary security goal of address space layout randomization (ASLR)?

To encrypt the contents of memory

To make it harder for an attacker to predict the location of code and data in memory

To prevent all types of memory corruption attacks

To isolate processes from each other

What is a defining characteristic of peer-to-peer (P2P) architecture?

All nodes have equivalent capabilities and can act as both clients and servers

A central server coordinates all communication between nodes

Only one node is responsible for data storage

Nodes cannot communicate directly with each other

Which security property is most directly threatened when an attacker captures and physically compromises a sensor node to extract its cryptographic keys?

Integrity of the sensor's physical casing

Non-repudiation of the sensor's manufacturer

Confidentiality of communications that use the compromised keys

Availability of the sensor node's power supply

Certified Secure Software Lifecycle Professional

Domain 4Objective 1

Define the Security Architecture CSSLP Practice Questions (Page 9)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 117 practice questions to prepare you well beyond it. (estimate)

117questions here

24free pages

43concepts

15%of the exam

43 Concepts in This Objective

SABSA framework
Security chain of responsibility
Federated identity
Security controls identification
Security controls prioritization
Client-server architecture
Peer-to-peer (P2P) architecture
Message queuing architecture
N-tier architecture
Service-oriented architecture (SOA)
Enterprise service bus (ESB)
Web services security
Microservices security
Client-side exploits and threats
Remote code execution risks
Constant connectivity implications
IoT security fundamentals
Wireless security
Location-based services security
RFID security
NFC security
Sensor networks security
Mesh network security
Secure boot
Secure memory
Secure update
SaaS security
PaaS security
IaaS security
Implicit data collection privacy
Side-channel mitigation
Speculative execution mitigation
Secure element
Firmware security
Driver security
AI security
Virtual reality security
Augmented reality security
Facility-related IoT security
Automotive IoT security
Robotics security
Medical device security
Software-defined production processes

Questions 41–45

41foundation · easy
What is the primary goal of prioritizing security controls?
Select an answer first
42foundation · easy
What is the primary security goal of address space layout randomization (ASLR)?
Select an answer first
43foundation · easy
What is a defining characteristic of peer-to-peer (P2P) architecture?
Select an answer first
44foundation · easy
In the context of robotics security architecture, which component is specifically responsible for enforcing the robot's safety rules and preventing unsafe actions?
Select an answer first
45foundation · easy
Which security property is most directly threatened when an attacker captures and physically compromises a sensor node to extract its cryptographic keys?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.