Implement Security Controls (e.g., Watchdogs, File Integrity Monitoring, Anti-Malware) CSSLP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A software development team is building a web application that will be deployed to a Windows Server environment. The team is concerned about the risk of malicious code being introduced during the build process, either through compromised dependencies or a compromised build server. The team wants to implement a control that can detect and block malicious code before it is deployed to production. What should the team implement?

   • AConfigure the build server to only allow signed code to be deployed, and reject any unsigned code.
   • BUse a file integrity monitoring tool to verify that the build output matches the source code exactly.
   • CRun a real-time anti-malware scanner on the build server that scans all files as they are written and blocks any that match known malware signatures.
   • DImplement a watchdog timer that restarts the build process if it takes longer than expected.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is deploying a new application on a server that is critical to the business. The security team has a limited budget and must choose which security controls to implement. The team has identified the following risks: the application could hang, critical configuration files could be tampered with, and malware could be introduced. The team must prioritize the controls based on the likelihood and impact of each risk. Which control should the team implement first?

   • AInstall anti-malware software to detect and remove malicious code.
   • BImplement a watchdog timer to detect and recover from application hangs.
   • CConduct a risk assessment to determine which risk has the highest likelihood and impact, and implement the corresponding control first.
   • DDeploy file integrity monitoring to detect unauthorized changes to configuration files.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying a new point-of-sale (POS) system on a dedicated appliance. The system runs a custom application that must be available during business hours. The security team wants to ensure that the application does not hang, that critical configuration files are not tampered with, and that no malware is present. The team has limited resources and must prioritize the most effective controls. Which combination of controls should the team implement?

   • AOnly install anti-malware software, since it can detect both malicious code and configuration changes.
   • BOnly deploy file integrity monitoring, since it can detect both configuration changes and malware.
   • COnly enable a watchdog timer, since it can detect both hangs and configuration changes.
   • DEnable a watchdog timer for the application, deploy file integrity monitoring for the configuration files, and install anti-malware software on the appliance.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of a watchdog timer in a software system?

   • ATo block malicious code by scanning files and network traffic in real time.
   • BTo monitor file integrity by comparing current file hashes to known-good baselines.
   • CTo detect and recover from software hangs or faults by resetting the system if the timer is not periodically refreshed.
   • DTo log all user actions for audit and forensic analysis.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a production application that occasionally freezes due to a rare race condition, which control would be most appropriate to automatically restore service?

   • AA manual process for users to report the freeze.
   • BA watchdog timer that restarts the application when it stops responding.
   • CAnti-malware scanning to remove the race condition.
   • DFile integrity monitoring to detect changes to the application binary.
   Reveal Solution Discussion Select an answer first