Outline Strategy and Roadmap CSSLP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In a secure SDLC, what happens at a control gate?

   • ASecurity testing is performed without any formal decision
   • BSecurity status is reviewed and a decision is made to allow or block progression to the next phase
   • CThe security team assigns a risk score to the project for reporting purposes
   • DThe project is automatically terminated if any security issue is found
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is an example of a break/build criterion?

   • AThe development team should use a specific coding standard
   • BThe security team should review the threat model at least once
   • CThe project manager should hold a team meeting every week
   • DAll critical and high-severity vulnerabilities must be remediated before the project can proceed
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which statement best describes a security milestone in the SDLC?

   • AA predefined point where security activities and deliverables are scheduled and evaluated
   • BA specific stage where security status is reviewed against established criteria
   • CA formal decision point that can block progression to the next phase
   • DA set of conditions that determine whether a project is halted or redirected
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   In the context of secure software development, what is the primary purpose of defining security milestones?

   • ATo schedule security activities and deliverables at predefined points in the SDLC and evaluate them
   • BTo assign individual developers responsibility for security decisions without formal review
   • CTo replace the need for ongoing security testing by consolidating all checks into a single event
   • DTo document security requirements only at the start of the project
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary goal of integrating security milestones and checkpoints into the SDLC?

   • ATo ensure security activities are aligned with the phases of the development lifecycle
   • BTo shift all security responsibilities to the security team
   • CTo eliminate the need for security testing after deployment
   • DTo reduce the number of phases in the SDLC
   Reveal Solution Discussion Select an answer first