Evaluate and Select Reusable Technologies CSSLP Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary function of a queuing mechanism in the context of flow control?

   • ATo authenticate users before they access a network.
   • BTo encrypt data in transit between two endpoints.
   • CTo filter traffic based on application-layer content.
   • DTo manage the order and timing of data transmission to prevent overload.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A multinational enterprise is deploying a new web portal for employees. The portal must support single sign-on (SSO) across multiple internal applications, including legacy apps that only support header-based authentication. The security team requires that authentication decisions be centralized and that the portal not store user passwords. Which architecture should be selected?

   • ADeploy an enterprise SSO solution that authenticates users against the corporate identity provider and injects a trusted header for legacy applications
   • BUse X.509 client certificates for every application, including legacy apps
   • CImplement a separate username/password database for the portal and synchronize it with the corporate directory
   • DConfigure each application to authenticate users independently against the corporate directory
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of a data retention policy?

   • ATo define how long data must be kept to meet legal, regulatory, and business requirements.
   • BTo control user access to data.
   • CTo encrypt all data stored in databases.
   • DTo provide backup and recovery of data.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary security advantage of using infrastructure as code (IaC) in a cloud environment?

   • AIt enables consistent and repeatable deployment of secure configurations.
   • BIt eliminates the need for security monitoring.
   • CIt automatically patches all operating systems.
   • DIt guarantees that no vulnerabilities exist in the deployed infrastructure.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A healthcare SaaS provider is integrating with a partner's patient portal. The partner requires mutual authentication between the two services, and the provider must ensure that the partner's identity is verified using a standardized, non-proprietary mechanism. The provider's existing infrastructure already issues and manages digital certificates for its own services. Which approach should the provider select to meet the partner's requirement?

   • AImplement X.509 certificate-based mutual TLS between the provider and the partner portal.
   • BDeploy a single sign-on (SSO) solution that federates identities using SAML assertions.
   • CConfigure the partner portal to accept the provider's existing username and password credentials over TLS.
   • DUse a shared API key passed in the HTTP header for both authentication and authorization.
   Reveal Solution Discussion Select an answer first