Evaluate and Select Reusable Technologies CSSLP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which flow control mechanism is specifically designed to inspect and filter network traffic based on a set of security rules?

   • AFirewall
   • BProxy
   • CQueuing mechanism
   • DProtocol
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which statement correctly describes the role of X.509 certificates in secure authentication?

   • AThey store user passwords in a hashed format for verification.
   • BThey bind a public key to an identity and are verified through a chain of trust.
   • CThey encrypt all network traffic between a client and server.
   • DThey provide a single set of credentials for accessing multiple applications.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A data controller must comply with a regulation that requires personal data to be deleted upon request. The data is stored in a relational database, and the application also maintains audit logs that may contain the same personal data. The security team must ensure that deletion requests are honored without breaking the audit trail required for security monitoring. Which approach should be taken?

   • AImplement a data deletion process that removes personal data from the operational database and pseudonymizes the audit logs by replacing personal identifiers with a token
   • BRetain all data and mark the user's account as inactive
   • CDelete the entire audit log entries that contain personal data
   • DEncrypt the personal data in the database and discard the encryption key
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of Address Space Layout Randomization (ASLR) as an operating system control?

   • ATo prevent unauthorized users from logging in.
   • BTo monitor network traffic for malicious activity.
   • CTo randomize memory addresses to make exploitation of memory corruption vulnerabilities more difficult.
   • DTo encrypt all data stored on disk.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial institution is required by regulation to retain customer transaction records for seven years. After that period, the records must be permanently destroyed. The institution uses a cloud storage service that supports versioning. Which practice should be implemented to ensure that records are not retained longer than required and are securely destroyed?

   • AEncrypt the records and discard the encryption key after seven years
   • BManually delete the records after seven years using the storage console
   • CConfigure a lifecycle policy to expire object versions after seven years and enable secure deletion (e.g., cryptographic erasure) for the final version
   • DKeep all versions indefinitely and rely on access controls to prevent access after seven years
   Reveal Solution Discussion Select an answer first