A security team is setting up a test environment for a new application that will be deployed in a containerized environment. The team needs to test the application's behavior under high load and ensure that the test environment is isolated from production. Which approach is most appropriate?

Use a dedicated container orchestration platform for testing

Use the production container platform for testing

Use a test environment with mock services and no containerization

Use a local container runtime without orchestration

A security team is setting up a test environment for a new application that will be deployed in a hybrid cloud environment. The team needs to test the application's behavior under high load while ensuring that the test environment does not impact production systems. Which approach is most appropriate?

Use a subset of production servers for testing

Use production data in the test environment

Use a dedicated test environment in the cloud with auto-scaling enabled

Test only in a local environment without cloud integration

Certified Secure Software Lifecycle Professional

Domain 6Objective 1

Develop Security Testing Strategy & Plan CSSLP Practice Questions (Page 1)

Part of the Secure Software Testing domain, which accounts for 14% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

14%of the exam

Questions 1–5

1application · medium
A security team is testing a new authentication service. They need to ensure that the service remains available and responsive during a distributed denial-of-service (DDoS) attack. Which nonfunctional security testing aspect is the team primarily addressing?
Select an answer first
2foundation · easy
A security tester is given a production-like environment but no documentation about the application's internal structure or source code. The tester must identify vulnerabilities by interacting with the application as an external attacker would. Which testing technique is being used?
Select an answer first
3expert · hard
A security team is setting up a test environment for a new application that will be deployed in a containerized environment. The team needs to test the application's behavior under high load and ensure that the test environment is isolated from production. Which approach is most appropriate?
Select an answer first
4foundation · easy
A tester is verifying that a user with the 'viewer' role cannot access the 'admin' dashboard URL directly. Which type of testing is being performed?
Select an answer first
5expert · hard
A security team is setting up a test environment for a new application that will be deployed in a hybrid cloud environment. The team needs to test the application's behavior under high load while ensuring that the test environment does not impact production systems. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Develop Security Testing Strategy & Plan CSSLP Practice Questions (Page 1)

Questions 1–5

A security team is testing a new authentication service. They need to ensure that the service remains available and responsive during a distributed denial-of-service (DDoS) attack. Which nonfunctional security testing aspect is the team primarily addressing?

A security tester is given a production-like environment but no documentation about the application's internal structure or source code. The tester must identify vulnerabilities by interacting with the application as an external attacker would. Which testing technique is being used?

A security team is setting up a test environment for a new application that will be deployed in a containerized environment. The team needs to test the application's behavior under high load and ensure that the test environment is isolated from production. Which approach is most appropriate?

A tester is verifying that a user with the 'viewer' role cannot access the 'admin' dashboard URL directly. Which type of testing is being performed?

Keep studying — Secure Software Testing