Implement Security Controls (e.g., Watchdogs, File Integrity Monitoring, Anti-Malware) CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which type of change would a file integrity monitoring tool typically flag as suspicious?

   • AA scheduled backup that creates a new file in a temporary directory.
   • BA user changing their own password through the standard interface.
   • CA modification to a system configuration file that was not part of an approved change.
   • DA software update that modifies files as part of an approved patch.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is deploying a new web application on a virtual machine in the cloud. The application is critical to the business and must be highly available. The security team wants to ensure that the application does not hang, and that if it does, it is automatically restarted. The team also wants to protect the application from malware. What should the team implement?

   • AConfigure the application to run under a process supervisor that restarts it if it stops responding, and install anti-malware software on the VM.
   • BOnly configure a process supervisor, since it can detect both hangs and malware.
   • COnly install anti-malware software, since it can detect both hangs and malware.
   • DUse a file integrity monitoring tool to detect changes to the application files, and rely on manual restart if the application hangs.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary role of anti-malware software during software implementation?

   • ATo monitor application performance and resource usage.
   • BTo prevent, detect, and remove malicious code from the development environment.
   • CTo manage software dependencies and their versions.
   • DTo enforce coding standards and style guidelines.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which activity is a typical function of anti-malware software?

   • AVerifying digital signatures of software updates.
   • BEncrypting sensitive data at rest.
   • CChecking code for buffer overflow vulnerabilities.
   • DScanning files and memory for known malware signatures.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A team is developing an embedded system for a smart thermostat. The system runs a main application that controls the heating and cooling. The team is concerned that if the main application hangs, the thermostat could continue heating or cooling indefinitely, causing damage. The team wants to ensure that the system automatically recovers from a hang. What should the team implement?

   • AAn anti-malware scanner that runs periodically to check for malicious code in the application.
   • BA watchdog timer that the main application resets periodically; if the application fails to reset it, the timer triggers a system reset.
   • CA manual reset button that the user can press if the thermostat stops responding.
   • DA file integrity monitoring tool that checks the application binary for changes at startup.
   Reveal Solution Discussion Select an answer first