Outline Strategy and Roadmap CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which element is typically included in a security roadmap?

   • AA list of all employees' security certifications
   • BA detailed network diagram of the production environment
   • CA summary of past security incidents
   • DA timeline showing when security milestones and checkpoints will occur
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is an example of a security checkpoint?

   • AA final decision to release the product to production
   • BA review of threat modeling results before the design phase is considered complete
   • CA list of security requirements gathered during project initiation
   • DA daily stand-up meeting where developers discuss progress
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A project team is planning the SDLC for a new application. They want to ensure that security activities are scheduled and evaluated at predefined points. Which approach best achieves this?

   • AConduct security reviews only when a security issue is reported.
   • BUse a single security review at the end of the project before release.
   • CDefine security milestones at the end of each major phase, such as requirements, design, and coding.
   • DAssign a security champion to each development team to monitor security informally.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A control gate fails because the security testing results show a high number of unresolved medium-severity vulnerabilities. The project sponsor wants to proceed to release. What is the most appropriate action?

   • ARelease the application and schedule a security patch for the next release.
   • BHalt the release and create a remediation plan to fix the vulnerabilities, then re-evaluate at a follow-up gate.
   • CProceed with release and track the vulnerabilities as known issues.
   • DEscalate to the security team to decide if the vulnerabilities are acceptable.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard · select all that apply

   A security architect is creating a security roadmap for a project that has a fixed release date. The roadmap must include milestones, checkpoints, and control gates. Which elements are essential to include in the roadmap to ensure it is actionable and enforceable? (Select all that apply.)

   • AA defined process for handling control gate failures.
   • BSpecific dates for each milestone and checkpoint.
   • CClear criteria for each checkpoint and control gate.
   • DThe names of the security team members responsible for each activity.
   Check answers Discussion Select an answer first