Implement Security Controls (e.g., Watchdogs, File Integrity Monitoring, Anti-Malware) CSSLP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A software development team is building a new application that will be deployed to a Windows environment. The team is concerned about the risk of malware being introduced through a compromised development tool. The team wants to implement a control that can detect and remove malware from the development environment. What should the team implement?

   • AImplement a watchdog timer that restarts the development tool if it stops responding.
   • BConfigure the development environment to only use signed tools and reject any unsigned ones.
   • CInstall and configure anti-malware software on all development workstations and the build server, with real-time scanning enabled.
   • DUse a file integrity monitoring tool to verify that development tools have not been modified.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A medical device manufacturer is developing an insulin pump that runs a real-time control loop. The pump's firmware occasionally enters a state where the main control thread stops responding but the processor continues executing lower-priority tasks. The team needs a mechanism to detect this condition and automatically reset the device to a safe state. What should the development team implement?

   • AA hardware watchdog timer that the main control thread periodically resets; if the timer expires, it triggers a system reset.
   • BA file integrity monitoring agent that checks the firmware binary in flash memory at boot time.
   • CAn interrupt service routine that monitors the main thread's program counter and logs an error if it detects an invalid address.
   • DA software-based idle loop that checks a flag set by the main control thread every 100 milliseconds.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In a software implementation, which action would a watchdog timer typically perform after it expires?

   • AAlert the user to manually check file permissions.
   • BQuarantine the file that caused the fault.
   • CRestart the application or the entire system to restore normal operation.
   • DRoll back the system to the last known-good configuration.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does a file integrity monitoring (FIM) tool detect unauthorized changes to critical files?

   • ABy monitoring CPU usage and memory consumption of running processes.
   • BBy comparing current file hashes against a stored baseline of known-good values.
   • CBy scanning network traffic for malicious payloads.
   • DBy analyzing user login patterns to identify suspicious behavior.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A software company is developing a mobile banking application. The development team uses a shared build server that is also used by other teams. The security team is concerned that malicious code could be introduced into the build process through a compromised tool or dependency. The team wants to implement a control that can detect and block malicious code during the build process. What should the team implement?

   • AUse a file integrity monitoring tool to verify that the build output matches the source code.
   • BRun an anti-malware scanner on the build server that scans all files, including dependencies and build tools, before they are used.
   • CConfigure the build server to only use signed dependencies and reject any unsigned ones.
   • DImplement a watchdog timer that restarts the build if it takes longer than expected.
   Reveal Solution Discussion Select an answer first