Which incident response phase involves actions taken to limit the damage and reduce the impact of a security incident?

Containment, eradication, and recovery

An organization is updating its incident response plan. The plan must include procedures for handling incidents that involve third-party vendors. The organization wants to ensure that the plan is effective and tested. What is the best approach?

Conduct a full-scale simulation exercise without vendor participation.

Include vendor contact information and conduct a tabletop exercise with vendors.

Focus only on internal procedures and exclude vendor involvement.

Write the plan and distribute it to all employees without testing.

Which statement correctly differentiates verification from validation in software testing?

Verification focuses on performance; validation focuses on security.

Verification is performed only after deployment; validation is performed during development.

Verification is done by end users; validation is done by developers.

Verification ensures the software meets the specified requirements; validation ensures the software meets user needs.

In an incident response plan, which role is typically responsible for coordinating communication with external stakeholders such as law enforcement and the media?

Public relations or communications officer

A security team is reviewing a new software release. The team has verified that the code meets the security requirements. However, the business stakeholders are concerned that the software does not meet their operational needs. The team needs to address this concern. Which activity should the team perform?

Ask the business stakeholders to accept the software as is.

Perform additional verification, such as more code reviews.

Update the security requirements to match the software.

Conduct a validation activity, such as user acceptance testing.

Certified Secure Software Lifecycle Professional

Domain 2Objective 9

Implement Secure Operation Practices CSSLP Practice Questions (Page 1)

Part of the Secure Software Lifecycle Management domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

11%of the exam

Questions 1–5

1foundation · easy
Which incident response phase involves actions taken to limit the damage and reduce the impact of a security incident?
Select an answer first
2expert · hard
An organization is updating its incident response plan. The plan must include procedures for handling incidents that involve third-party vendors. The organization wants to ensure that the plan is effective and tested. What is the best approach?
Select an answer first
3foundation · easy
Which statement correctly differentiates verification from validation in software testing?
Select an answer first
4foundation · easy
In an incident response plan, which role is typically responsible for coordinating communication with external stakeholders such as law enforcement and the media?
Select an answer first
5expert · hard
A security team is reviewing a new software release. The team has verified that the code meets the security requirements. However, the business stakeholders are concerned that the software does not meet their operational needs. The team needs to address this concern. Which activity should the team perform?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.