A security architect is evaluating a Python-based web application that will run in a container. The team wants to minimize the risk of arbitrary code execution by restricting the runtime's access to the host operating system. Which combination of controls should the architect recommend?

Use a Python interpreter with the -O flag to disable assertions

Deploy the application on a hypervisor-based VM instead of a container

Enable Python's built-in sandboxing module

Run the container as a non-root user and drop all Linux capabilities

Why is it important to encrypt backup media?

To protect the confidentiality of data if the media is lost or stolen.

To ensure backups are compatible with all systems.

To speed up the backup process.

To reduce the storage space required for backups.

A company's backup strategy must ensure that backups are protected from ransomware that might encrypt the production database. The backups are stored on a separate server, but the security team wants to add a control that prevents an attacker who compromises the backup server from modifying or deleting previous backup versions. Which approach should be implemented?

Schedule backups to a different folder each day

Encrypt the backups with a key stored on the backup server

Store backups on immutable storage that prevents modification or deletion for a retention period

Use a database trigger to prevent backup file deletion

What is the primary purpose of single sign-on (SSO) in an enterprise environment?

To replace all password-based authentication with biometric verification.

To allow users to authenticate once and gain access to multiple applications without re-entering credentials.

To encrypt all data stored in a database.

To provide a hardware-based storage for cryptographic keys.

What is the primary purpose of a secure backup strategy?

To ensure data availability and integrity in the event of data loss or corruption.

To prevent unauthorized access to data.

To speed up application performance.

To encrypt all data in transit.

Certified Secure Software Lifecycle Professional

Domain 4Objective 3

Evaluate and Select Reusable Technologies CSSLP Practice Questions (Page 5)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

15%of the exam

Questions 21–25

21application · medium
A security architect is evaluating a Python-based web application that will run in a container. The team wants to minimize the risk of arbitrary code execution by restricting the runtime's access to the host operating system. Which combination of controls should the architect recommend?
Select an answer first
22foundation · easy
Why is it important to encrypt backup media?
Select an answer first
23application · medium
A company's backup strategy must ensure that backups are protected from ransomware that might encrypt the production database. The backups are stored on a separate server, but the security team wants to add a control that prevents an attacker who compromises the backup server from modifying or deleting previous backup versions. Which approach should be implemented?
Select an answer first
24foundation · easy
What is the primary purpose of single sign-on (SSO) in an enterprise environment?
Select an answer first
25foundation · easy
What is the primary purpose of a secure backup strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.