Perform Operational Risk Analysis CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a key topic in security awareness training for end users of a deployed system?

   • APerforming database backups
   • BRecognizing and reporting phishing attempts
   • CWriting secure application code
   • DConfiguring network firewalls
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which deployment environment is specifically used to validate that a release candidate functions correctly in an environment that closely mirrors production before it is promoted?

   • AProduction environment
   • BQA environment
   • CStaging environment
   • DDevelopment environment
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which type of regulation is most likely to impact the deployment of a system that processes personal data of EU citizens?

   • ASarbanes-Oxley Act (SOX)
   • BHealth Insurance Portability and Accountability Act (HIPAA)
   • CGeneral Data Protection Regulation (GDPR)
   • DPayment Card Industry Data Security Standard (PCI DSS)
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A development team has completed coding a new module that integrates with an external payment gateway. Before deploying to production, they want to verify that the integration works correctly and securely. What is the most appropriate testing approach?

   • ATest only the module's internal logic without interacting with the payment gateway.
   • BDeploy directly to production and monitor for errors.
   • CPerform integration testing in a staging environment that mirrors production, using test credentials for the payment gateway.
   • DUse production credentials in the QA environment to ensure the integration works with real data.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A software company is developing an application that will be sold to government agencies. The application will process sensitive data. The company must ensure compliance with government regulations. What is the most important legal consideration during the deployment phase?

   • AIdentify and comply with all applicable laws and regulations, including data protection and security requirements specific to government contracts.
   • BMinimize the cost of deployment to stay within budget.
   • CEnsure the application has a user-friendly interface to encourage adoption.
   • DUse open-source software to avoid licensing fees.
   Reveal Solution Discussion Select an answer first