Certified Secure Software Lifecycle Professional
Domain 7Objective 7
Perform Information Security Continuous Monitoring CSSLP Practice Questions (Page 2)
Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)
35questions here
7free pages
9concepts
11%of the exam
Questions 6–10
- 6
Which intrusion detection method is most effective at detecting previously unknown or zero-day attacks?
Select an answer first - 7
What should a security team do when a new regulation requires that certain monitoring data be retained for a longer period?
Select an answer first - 8
An organization wants to integrate endpoint detection and response (EDR) alerts, network flow data, and cloud access logs into their SIEM. The goal is to detect lateral movement. What is the most important integration consideration?
Select an answer first - 9
Which incident response step involves analyzing the incident to identify improvements for future response efforts?
Select an answer first - 10
A financial services company consolidates security monitoring into a SIEM. The team ingests firewall logs, Active Directory authentication events, and endpoint detection agent alerts. Analysts complain that the same user login failure appears as three separate alerts with different timestamps, making triage difficult. Which SIEM capability should the team configure to address this issue?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.