Evaluate and Select Reusable Technologies CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A development team wants to deploy a microservices-based application where each service runs in an isolated user space with its own filesystem and network stack, but they want to avoid the overhead of managing separate operating systems. They also need to ensure that the deployment configuration is version-controlled and reproducible. Which combination of technologies should they choose?

   • AServerless functions with manual environment configuration
   • BA single monolithic application deployed on a physical server
   • CHypervisor-based virtual machines with a configuration management tool
   • DContainers orchestrated by a platform that uses infrastructure as code (IaC) templates
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of a Trusted Platform Module (TPM)?

   • ATo provide a firewall for the system.
   • BTo manage user passwords.
   • CTo encrypt all network traffic.
   • DTo provide hardware-based storage and generation of cryptographic keys.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which operating system control is used to enforce mandatory access control (MAC) policies?

   • AAntivirus software
   • BFile system permissions (e.g., chmod)
   • CSecurity-Enhanced Linux (SELinux)
   • DUser account management
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary goal of Data Loss Prevention (DLP) systems?

   • ATo prevent unauthorized access, use, or transmission of sensitive data.
   • BTo encrypt all data stored in a database.
   • CTo manage user authentication and authorization.
   • DTo provide backup and recovery of data.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial application must prevent clients from directly reaching internal database servers. The security team wants a control that can inspect application-layer traffic, enforce allowlisting of specific SQL commands, and terminate TLS connections for centralized logging. Which technology should be placed between the clients and the database servers?

   • AA network firewall filtering by IP address and port 1433
   • BA database trigger that rejects unauthorized queries
   • CA queuing mechanism that buffers all database requests
   • DA reverse proxy with SQL-aware filtering
   Reveal Solution Discussion Select an answer first