What is the purpose of using templates in secure configuration provisioning?

To allow each administrator to configure systems as they see fit

To make the configuration process faster by skipping security checks

To store passwords in plain text for easy access

To define a standard, secure configuration that can be applied to multiple systems

A company is deploying a commercial software product. The license agreement requires that the software only be installed on a specific number of servers. The security team must ensure compliance during deployment. Which action is most appropriate?

Track the number of installations and ensure they do not exceed the licensed quantity.

Ignore the license limit because the software is only for internal use.

Use a cracked version of the software to avoid license fees.

Install the software on all servers and rely on the vendor to audit usage.

Why is it important to verify the authenticity of a patch before deploying it?

To prevent the installation of malicious or tampered software

To ensure the patch is compatible with the system's hardware

To ensure the patch does not require a system reboot

To reduce the time required to install the patch

A company's security policy requires that all access to sensitive data be logged and reviewed. The IT team wants to implement a technical control that enforces this policy. Which control is most effective?

Grant all users access to sensitive data and rely on the firewall to protect it.

Disable logging to reduce storage costs.

Enable audit logging on the sensitive data repositories and configure alerts for unusual access patterns.

Rely on users to report any access to sensitive data.

What is the primary mechanism secure boot uses to prevent unauthorized code from executing during system startup?

Encrypting the boot partition with a strong algorithm

Scanning the boot sector for known malware signatures

Requiring a user to enter a password before the OS loads

Verifying the digital signature of each boot component before it is loaded

Certified Secure Software Lifecycle Professional

Domain 7Objective 5

Ensure Secure Installation CSSLP Practice Questions (Page 5)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

13concepts

11%of the exam

Questions 21–25

21foundation · easy
What is the purpose of using templates in secure configuration provisioning?
Select an answer first
22application · medium
A company is deploying a commercial software product. The license agreement requires that the software only be installed on a specific number of servers. The security team must ensure compliance during deployment. Which action is most appropriate?
Select an answer first
23foundation · easy
Why is it important to verify the authenticity of a patch before deploying it?
Select an answer first
24expert · hard
A company's security policy requires that all access to sensitive data be logged and reviewed. The IT team wants to implement a technical control that enforces this policy. Which control is most effective?
Select an answer first
25foundation · easy
What is the primary mechanism secure boot uses to prevent unauthorized code from executing during system startup?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.