Certified Secure Software Lifecycle Professional
Domain 3Objective 2
Identify Compliance Requirements CSSLP Practice Questions (Page 2)
Part of the Secure Software Requirements domain, which accounts for 13% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
4concepts
13%of the exam
Questions 6–10
- 6
A software company is developing a system for a hospital that will also process credit card payments for patient co-pays. The system will be used in the United States. The security team is defining the compliance requirements. Which of the following is the most critical compliance standard to address?
Select an answer first - 7
A software product will process personal data of citizens residing in the European Union. Which regulatory authority would have jurisdiction over this software's data protection compliance?
Select an answer first - 8
A software company is developing a system for a government defense agency. The system will handle both classified information and personnel records that include health data. The company also processes credit card payments for internal purchases. Which set of compliance standards must the software requirements address?
Select an answer first - 9
A defense contractor is developing software for a government agency. The software will handle classified information. Which regulatory authority or standard should the security team identify as having primary jurisdiction over the software's security requirements?
Select an answer first - 10
A software development team is required to use a specific set of approved coding standards and a particular version control system. What type of compliance requirement does this represent?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.